nicolargo

Records25All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high18CVSS 7.0–8.9

Exploited now

nicolargo records in CISA KEV

No nicolargo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Glances 15 records HIGH

Records

25 records

TI-2026-25142 CVE-2026-32633 · GHSA-r297-p3v4-wp8m

Glances's Browser API Exposes Reusable Downstream Credentials via `/api/4/serverslist`

HIGH 80

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00501 Published 2026-03-18 Fixed in 4.5.2 CWE-200

TI-2026-25106 CVE-2026-32596 · GHSA-wvxv-4j8q-4wjq

Glances exposes the REST API without authentication

HIGH 77

Glances is an open-source system cross-platform monitoring tool.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.01584 Published 2026-03-18 Fixed in 4.5.2 CWE-200

TI-2026-48284 CVE-2026-68518 · GHSA-qcpp-8x79-hhp3

Glances: Command injection bypass of action-template sanitizer via cross-field shell-operator reconstruction

HIGH 73

Glances is an open-source system cross-platform monitoring tool.

CVSS 4.0HIGH 8.8 Local Low privileges No interaction EPSS 0.00173 Published 2026-08-17 Fixed in 4.5.6 CWE-78

TI-2026-44988 CVE-2026-62982 · GHSA-73wf-9vmv-5pv9

OS command injection in nicolargo glances

HIGH 73

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00197 Published 2026-08-17 Fixed in 4.5.6 CWE-78

TI-2026-27083 CVE-2026-34839 · GHSA-gfc2-9qmw-w7vh

Glances Vulnerable to Cross-Origin Information Disclosure via Unauthenticated REST API (/api/4) due to Permissive CORS

HIGH 73

Glances is an open-source system cross-platform monitoring tool.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00408 Published 2026-04-20 Fixed in 4.5.4 CWE-200

TI-2026-25120 CVE-2026-32611 · GHSA-49g7-2ww7-3vf5

Glances has a SQL Injection in DuckDB Export via Unparameterized DDL Statements

HIGH 72

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00345 Published 2026-03-18 Fixed in 4.5.2 CWE-89

TI-2026-25118 CVE-2026-32609 · GHSA-cvwp-r2g2-j824

Glances has Incomplete Secrets Redaction: /api/v4/args Endpoint Leaks Password Hash and SNMP Credentials

HIGH 72

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00519 Published 2026-03-18 Fixed in 4.5.2 CWE-200

TI-2026-25143 CVE-2026-32634 · GHSA-vx5f-957p-qpvm

Glances Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed Servers

HIGH 70

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.0028 Published 2026-03-18 Fixed in 4.5.2 CWE-346

TI-2026-25119 CVE-2026-32610 · GHSA-9jfm-9rc6-2hfq

Glances's Default CORS Configuration Allows Cross-Origin Credential Theft

HIGH 70

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00352 Published 2026-03-18 Fixed in 4.5.2 CWE-942

TI-2026-38896 CVE-2026-53925 · GHSA-3vwc-qwhc-3mj7

Path traversal in nicolargo glances

HIGH 69

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00185 Published 2026-06-25 Fixed in 4.5.5 CWE-22

TI-2026-34266 CVE-2026-46607 · GHSA-9837-48hr-q32j

Glances: Insecure Pickle Deserialization in Version Cache Leads to Arbitrary Code Execution

HIGH 69

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0019 Published 2026-06-25 Fixed in 4.5.5 CWE-502

TI-2026-34265 CVE-2026-46606 · GHSA-v5r2-qh84-fjx5

Glances: Command Injection via KVM/QEMU VM Domain Names in glances/plugins/vms/engines/virsh.py

HIGH 69

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00191 Published 2026-06-25 Fixed in 4.5.5 CWE-78

TI-2026-26022 CVE-2026-33641 · GHSA-qhj7-v7h7-q4c7

Glances Vulnerable to Command Injection via Dynamic Configuration Values

HIGH 69

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00903 Published 2026-04-02 Fixed in 4.5.3 CWE-78

TI-2026-27690 CVE-2026-35587 · GHSA-g5pq-48mj-jvw8

Glances IP Plugin has SSRF via public_api that leads to credential leakage

HIGH 67

Glances is an open-source system cross-platform monitoring tool.

CVSS 4.0HIGH 7.3 Network Low privileges No interaction EPSS 0.00396 Published 2026-04-20 Fixed in 4.5.4 CWE-918

TI-2026-23755 CVE-2026-30930 · GHSA-x46r-mf5g-xpr6

Glances has SQL Injection via Process Names in TimescaleDB Export

HIGH 67

Glances is an open-source system cross-platform monitoring tool.

CVSS 4.0HIGH 7.3 Local No auth No interaction EPSS 0.00417 Published 2026-03-10 Fixed in 4.5.1 CWE-89

TI-2026-48285 CVE-2026-68519 · GHSA-59fj-m2j6-hcxh

Glances: `--disable-config-exec` does not cover on-alert action commands (incomplete fix of CVE-2026-53925)

HIGH 66

Glances is an open-source system cross-platform monitoring tool.

CVSS 4.0HIGH 7.1 Local High privileges No interaction EPSS 0.00178 Published 2026-08-17 Fixed in 4.5.6 CWE-78

TI-2026-25926 CVE-2026-33533 · GHSA-7p93-6934-f4q7

Glances Vulnerable to Cross-Origin System Information Disclosure via XML-RPC Server CORS Wildcard

MEDIUM 64

Glances is an open-source system cross-platform monitoring tool.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00345 Published 2026-04-02 Fixed in 4.5.3 CWE-942

TI-2026-48286 CVE-2026-68520 · GHSA-4h34-v6r8-mmjc

Glances: as_dict_secure() Value-Level Bypass Leaks Credentials in URL Values via /api/4/config

MEDIUM 63

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00405 Published 2026-08-17 Fixed in 4.5.6 CWE-200

TI-2026-27691 CVE-2026-35588 · GHSA-grp3-h8m8-45p7

Glances has CQL Injection in its Cassandra Export Module via Unsanitized Config Values

MEDIUM 63

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1MEDIUM 6.3 Local High privileges No interaction EPSS 0.00212 Published 2026-04-20 Fixed in 4.5.4 CWE-89

TI-2026-48283 CVE-2026-68517 · GHSA-fp27-88fp-2phg

Glances: REST API CORS Credentials Guard Uses Exact-Match Instead of Membership Test…

MEDIUM 62

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0046 Published 2026-08-17 Fixed in 4.5.6 CWE-942

TI-2026-25141 CVE-2026-32632 · GHSA-hhcg-r27j-fhv9

Glances's REST/WebUI Lacks Host Validation and Remains Exposed to DNS Rebinding

MEDIUM 60

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1MEDIUM 5.9 Network No auth User interaction EPSS 0.00196 Published 2026-03-18 Fixed in 4.5.2 CWE-346

TI-2026-34269 CVE-2026-46611 · GHSA-w856-8p3r-p338

Glances: XML-RPC Server Missing Host Header Validation Enables DNS Rebinding Attack

MEDIUM 57

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00145 Published 2026-06-25 Fixed in 4.5.5 CWE-346

TI-2026-23753 CVE-2026-30928 · GHSA-gh4x-f7cq-wwx6

Glances Exposes Unauthenticated Configuration Secrets

MEDIUM 47

Glances is an open-source system cross-platform monitoring tool.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0181 Published 2026-03-10 Fixed in 4.5.1 CWE-200

TI-2026-34267 CVE-2026-46608 · GHSA-87qc-fj39-wccr

Glances: XML-RPC Multi-Origin CORS Configuration Silently Falls Back to Wildcard (Incomplete Fix for CVE-2026-33533)

LOW 33

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00401 Published 2026-06-25 Fixed in 4.5.5 CWE-183

TI-2026-25117 CVE-2026-32608 · GHSA-vcv2-q258-wrg7

Glances has a Command Injection via Process Names in Action Command Templates

LOW 32

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00252 Published 2026-03-18 Fixed in 4.5.2 CWE-78

Open these records in search →