CVE-2020-26300: Systeminformation

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

systeminformation is an npm package that provides system and OS information library for node.js. In systeminformation before version 4.26.2 there is a command injection vulnerability. Problem was fixed in version 4.26.2 with a shell string sanitation fix.

Affected products

• Systeminformation Systeminformation: before 4.26.2 (fixed in 4.26.2)

Published 2021-09-09. Last modified 2026-06-17.