TI-2026-25142 CVE-2026-32633 · GHSA-r297-p3v4-wp8m
Glances's Browser API Exposes Reusable Downstream Credentials via `/api/4/serverslist`
Priority HIGH 80
Glances is an open-source system cross-platform monitoring tool.
nicolargo
Records25All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high18CVSS 7.0–8.9
Exploited now
nicolargo records in CISA KEVNo nicolargo vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
15 records in Glances · all components
TI-2026-25106 CVE-2026-32596 · GHSA-wvxv-4j8q-4wjq
Glances exposes the REST API without authentication
Priority HIGH 77
Glances is an open-source system cross-platform monitoring tool.
TI-2026-27083 CVE-2026-34839 · GHSA-gfc2-9qmw-w7vh
Glances Vulnerable to Cross-Origin Information Disclosure via Unauthenticated REST API (/api/4) due to Permissive CORS
Priority HIGH 73
Glances is an open-source system cross-platform monitoring tool.
TI-2026-25120 CVE-2026-32611 · GHSA-49g7-2ww7-3vf5
Glances has a SQL Injection in DuckDB Export via Unparameterized DDL Statements
Priority HIGH 72
Glances is an open-source system cross-platform monitoring tool.
TI-2026-25118 CVE-2026-32609 · GHSA-cvwp-r2g2-j824
Glances has Incomplete Secrets Redaction: /api/v4/args Endpoint Leaks Password Hash and SNMP Credentials
Priority HIGH 72
Glances is an open-source system cross-platform monitoring tool.
TI-2026-25143 CVE-2026-32634 · GHSA-vx5f-957p-qpvm
Glances Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed Servers
Priority HIGH 70
Glances is an open-source system cross-platform monitoring tool.
TI-2026-25119 CVE-2026-32610 · GHSA-9jfm-9rc6-2hfq
Glances's Default CORS Configuration Allows Cross-Origin Credential Theft
Priority HIGH 70
Glances is an open-source system cross-platform monitoring tool.
TI-2026-26022 CVE-2026-33641 · GHSA-qhj7-v7h7-q4c7
Glances Vulnerable to Command Injection via Dynamic Configuration Values
Priority HIGH 69
Glances is an open-source system cross-platform monitoring tool.
TI-2026-27690 CVE-2026-35587 · GHSA-g5pq-48mj-jvw8
Glances IP Plugin has SSRF via public_api that leads to credential leakage
Priority HIGH 67
Glances is an open-source system cross-platform monitoring tool.
TI-2026-23755 CVE-2026-30930 · GHSA-x46r-mf5g-xpr6
Glances has SQL Injection via Process Names in TimescaleDB Export
Priority HIGH 67
Glances is an open-source system cross-platform monitoring tool.
TI-2026-25926 CVE-2026-33533 · GHSA-7p93-6934-f4q7
Glances Vulnerable to Cross-Origin System Information Disclosure via XML-RPC Server CORS Wildcard
Priority MEDIUM 64
Glances is an open-source system cross-platform monitoring tool.
TI-2026-27691 CVE-2026-35588 · GHSA-grp3-h8m8-45p7
Glances has CQL Injection in its Cassandra Export Module via Unsanitized Config Values
Priority MEDIUM 63
Glances is an open-source system cross-platform monitoring tool.
TI-2026-25141 CVE-2026-32632 · GHSA-hhcg-r27j-fhv9
Glances's REST/WebUI Lacks Host Validation and Remains Exposed to DNS Rebinding
Priority MEDIUM 60
Glances is an open-source system cross-platform monitoring tool.
TI-2026-23753 CVE-2026-30928 · GHSA-gh4x-f7cq-wwx6
Glances Exposes Unauthenticated Configuration Secrets
Priority MEDIUM 47
Glances is an open-source system cross-platform monitoring tool.
TI-2026-25117 CVE-2026-32608 · GHSA-vcv2-q258-wrg7
Glances has a Command Injection via Process Names in Action Command Templates
Priority LOW 32
Glances is an open-source system cross-platform monitoring tool.