Skip to content
OpenAdvisories

Package · npm

@signalk/set-system-time

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 10.0
    CVE-2026-23515

    RCE - Command Injection in Signal K set-system-time plugin

    Signal K Server is a server application that runs on a central hub in a boat. Prior to 1.5.0, a command injection vulnerability allows authenticated users with write permissions to execute arbitrary shell commands on the Signal K server when the set-system-ti…

    SignalK signalk-server @signalk/set-system-time npm