Threats Tagged 'ghsa-5xpp-75jx-m839'
View all threats tagged with 'ghsa-5xpp-75jx-m839'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-5xpp-75jx-m839'
Click on any threat for detailed analysis and mitigation recommendations
GHSA-5xpp-75jx-m839: systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on LinuxCVE-2026-50289 0 The systeminformation Node.js library version prior to 5.31.7 on Linux is vulnerable to OS command injection via the networkInterfaces() function. This occurs because the library reads the /etc/network/interfaces file and recursively processes 'source' directives, interpolating unsanitized file paths into shell commands executed with execSync(). An attacker able to influence any sourced path can execute arbitrary commands with the privileges of the calling process. This vulnerability affects local asset agents, monitoring tools, and other software that calls networkInterfaces() on Linux systems. No special hardware or NetworkManager activation is required; the vulnerability arises from unsafe shell command construction with unquoted input from configuration files. Join the discussion | GCVE Database | 07/15/2026, 23:09:28 UTC Added: 07/16/2026, 10:35:48 UTC |
Showing 1 to 1 of 1 result