Log in Start free

nicolargo

Products

ProductCVEsExploitedLatest
glances25–Aug 17, 2026

Exploited and recent CVEs

  • CVE-2026-68519 High 7.1 Glances: `--disable-config-exec` does not cover on-alert action commands (incomplete fix of CVE-2026-53925) 0.2%
  • CVE-2026-62982 High 8.8 Glances: Incomplete fix of CVE-2026-32608: action-template sanitizer is bypassed by nested stat values (process 'cmdline') → OS command injection 0.2%
  • CVE-2026-68520 Medium 5.3 Glances: as_dict_secure() Value-Level Bypass Leaks Credentials in URL Values via /api/4/config 0.4%
  • CVE-2026-68517 Medium 6.5 Glances: REST API CORS Credentials Guard Uses Exact-Match Instead of Membership Test — Bypassed by Any Multi-Origin Allowlist Containing the Wildcard 0.5%
  • CVE-2026-68518 High 8.8 Glances: Command injection bypass of action-template sanitizer via cross-field shell-operator reconstruction 0.2%
  • CVE-2026-46608 High 7.4 Glances: XML-RPC Multi-Origin CORS Configuration Silently Falls Back to Wildcard (Incomplete Fix for CVE-2026-33533) 0.4%
  • CVE-2026-46607 High 7.8 Glances: Insecure Pickle Deserialization in Version Cache Leads to Arbitrary Code Execution 0.2%
  • CVE-2026-53925 High 7.8 Glances: Arbitrary file write and command execution via `secure_popen` redirection and chaining operators in AMP command configuration 0.2%
  • CVE-2026-46606 High 7.8 Glances: Command Injection via KVM/QEMU VM Domain Names in glances/plugins/vms/engines/virsh.py 0.2%
  • CVE-2026-46611 Medium 5.3 Glances: XML-RPC Server Missing Host Header Validation Enables DNS Rebinding Attack 0.1%
  • CVE-2026-35588 Medium 6.3 Glances has CQL Injection in its Cassandra Export Module via Unsanitized Config Values 0.2%
  • CVE-2026-35587 High 7.3 Glances IP Plugin has SSRF via public_api that leads to credential leakage 0.4%
  • CVE-2026-34839 High 7.7 Glances Vulnerable to Cross-Origin Information Disclosure via Unauthenticated REST API (/api/4) due to Permissive CORS 0.4%
  • CVE-2026-33641 High 7.8 Glances Vulnerable to Command Injection via Dynamic Configuration Values 0.9%
  • CVE-2026-33533 High 7.1 Glances Vulnerable to Cross-Origin System Information Disclosure via XML-RPC Server CORS Wildcard 0.3%
  • CVE-2026-32634 High 8.1 Glances Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed Servers 0.3%
  • CVE-2026-32633 Critical 9.1 Glances's Browser API Exposes Reusable Downstream Credentials via `/api/4/serverslist` 0.5%
  • CVE-2026-32632 Medium 5.9 Glances's REST/WebUI Lacks Host Validation and Remains Exposed to DNS Rebinding 0.2%
  • CVE-2026-32611 High 7.0 Glances has a SQL Injection in DuckDB Export via Unparameterized DDL Statements 0.3%
  • CVE-2026-32610 High 8.1 Glances's Default CORS Configuration Allows Cross-Origin Credential Theft 0.4%
  • CVE-2026-32609 High 7.5 Glances has Incomplete Secrets Redaction: /api/v4/args Endpoint Leaks Password Hash and SNMP Credentials 0.5%
  • CVE-2026-32608 High 7.0 Glances has a Command Injection via Process Names in Action Command Templates 0.3%
  • CVE-2026-32596 High 8.7 Glances exposes the REST API without authentication 1.6%
  • CVE-2026-30930 High 7.3 Glances has SQL Injection via Process Names in TimescaleDB Export 0.4%
  • CVE-2026-30928 High 8.7 Glances Exposes Unauthenticated Configuration Secrets 1.8%