Vulnerabilities

TI-2026-48285 CVE-2026-68519 · GHSA-59fj-m2j6-hcxh

Glances: `--disable-config-exec` does not cover on-alert action commands (incomplete fix of CVE-2026-53925)

HIGH 66

Glances is an open-source system cross-platform monitoring tool.

CVSS 4.0HIGH 7.1 Local High privileges No interaction EPSS 0.00178 Published 2026-08-17 Fixed in 4.5.6 CWE-78

TI-2026-44988 CVE-2026-62982 · GHSA-73wf-9vmv-5pv9

OS command injection in nicolargo glances

HIGH 73

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00197 Published 2026-08-17 Fixed in 4.5.6 CWE-78

TI-2026-48286 CVE-2026-68520 · GHSA-4h34-v6r8-mmjc

Glances: as_dict_secure() Value-Level Bypass Leaks Credentials in URL Values via /api/4/config

MEDIUM 63

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00405 Published 2026-08-17 Fixed in 4.5.6 CWE-200

TI-2026-48283 CVE-2026-68517 · GHSA-fp27-88fp-2phg

Glances: REST API CORS Credentials Guard Uses Exact-Match Instead of Membership Test…

MEDIUM 62

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0046 Published 2026-08-17 Fixed in 4.5.6 CWE-942

TI-2026-48284 CVE-2026-68518 · GHSA-qcpp-8x79-hhp3

Glances: Command injection bypass of action-template sanitizer via cross-field shell-operator reconstruction

HIGH 73

Glances is an open-source system cross-platform monitoring tool.

CVSS 4.0HIGH 8.8 Local Low privileges No interaction EPSS 0.00173 Published 2026-08-17 Fixed in 4.5.6 CWE-78

TI-2026-34267 CVE-2026-46608 · GHSA-87qc-fj39-wccr

Glances: XML-RPC Multi-Origin CORS Configuration Silently Falls Back to Wildcard (Incomplete Fix for CVE-2026-33533)

LOW 33

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00401 Published 2026-06-25 Fixed in 4.5.5 CWE-183

TI-2026-34266 CVE-2026-46607 · GHSA-9837-48hr-q32j

Glances: Insecure Pickle Deserialization in Version Cache Leads to Arbitrary Code Execution

HIGH 69

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0019 Published 2026-06-25 Fixed in 4.5.5 CWE-502

TI-2026-38896 CVE-2026-53925 · GHSA-3vwc-qwhc-3mj7

Path traversal in nicolargo glances

HIGH 69

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00185 Published 2026-06-25 Fixed in 4.5.5 CWE-22

TI-2026-34265 CVE-2026-46606 · GHSA-v5r2-qh84-fjx5

Glances: Command Injection via KVM/QEMU VM Domain Names in glances/plugins/vms/engines/virsh.py

HIGH 69

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00191 Published 2026-06-25 Fixed in 4.5.5 CWE-78

TI-2026-34269 CVE-2026-46611 · GHSA-w856-8p3r-p338

Glances: XML-RPC Server Missing Host Header Validation Enables DNS Rebinding Attack

MEDIUM 57

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00145 Published 2026-06-25 Fixed in 4.5.5 CWE-346

TI-2026-27691 CVE-2026-35588 · GHSA-grp3-h8m8-45p7

Glances has CQL Injection in its Cassandra Export Module via Unsanitized Config Values

MEDIUM 63

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1MEDIUM 6.3 Local High privileges No interaction EPSS 0.00212 Published 2026-04-20 Fixed in 4.5.4 CWE-89

TI-2026-27690 CVE-2026-35587 · GHSA-g5pq-48mj-jvw8

Glances IP Plugin has SSRF via public_api that leads to credential leakage

HIGH 67

Glances is an open-source system cross-platform monitoring tool.

CVSS 4.0HIGH 7.3 Network Low privileges No interaction EPSS 0.00396 Published 2026-04-20 Fixed in 4.5.4 CWE-918

TI-2026-27083 CVE-2026-34839 · GHSA-gfc2-9qmw-w7vh

Glances Vulnerable to Cross-Origin Information Disclosure via Unauthenticated REST API (/api/4) due to Permissive CORS

HIGH 73

Glances is an open-source system cross-platform monitoring tool.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00408 Published 2026-04-20 Fixed in 4.5.4 CWE-200

TI-2026-26022 CVE-2026-33641 · GHSA-qhj7-v7h7-q4c7

Glances Vulnerable to Command Injection via Dynamic Configuration Values

HIGH 69

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00903 Published 2026-04-02 Fixed in 4.5.3 CWE-78

TI-2026-25926 CVE-2026-33533 · GHSA-7p93-6934-f4q7

Glances Vulnerable to Cross-Origin System Information Disclosure via XML-RPC Server CORS Wildcard

MEDIUM 64

Glances is an open-source system cross-platform monitoring tool.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00345 Published 2026-04-02 Fixed in 4.5.3 CWE-942

TI-2026-25143 CVE-2026-32634 · GHSA-vx5f-957p-qpvm

Glances Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed Servers

HIGH 70

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.0028 Published 2026-03-18 Fixed in 4.5.2 CWE-346

TI-2026-25142 CVE-2026-32633 · GHSA-r297-p3v4-wp8m

Glances's Browser API Exposes Reusable Downstream Credentials via `/api/4/serverslist`

HIGH 80

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00501 Published 2026-03-18 Fixed in 4.5.2 CWE-200

TI-2026-25141 CVE-2026-32632 · GHSA-hhcg-r27j-fhv9

Glances's REST/WebUI Lacks Host Validation and Remains Exposed to DNS Rebinding

MEDIUM 60

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1MEDIUM 5.9 Network No auth User interaction EPSS 0.00196 Published 2026-03-18 Fixed in 4.5.2 CWE-346

TI-2026-25120 CVE-2026-32611 · GHSA-49g7-2ww7-3vf5

Glances has a SQL Injection in DuckDB Export via Unparameterized DDL Statements

HIGH 72

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00345 Published 2026-03-18 Fixed in 4.5.2 CWE-89

TI-2026-25119 CVE-2026-32610 · GHSA-9jfm-9rc6-2hfq

Glances's Default CORS Configuration Allows Cross-Origin Credential Theft

HIGH 70

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00352 Published 2026-03-18 Fixed in 4.5.2 CWE-942

TI-2026-25118 CVE-2026-32609 · GHSA-cvwp-r2g2-j824

Glances has Incomplete Secrets Redaction: /api/v4/args Endpoint Leaks Password Hash and SNMP Credentials

HIGH 72

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00519 Published 2026-03-18 Fixed in 4.5.2 CWE-200

TI-2026-25117 CVE-2026-32608 · GHSA-vcv2-q258-wrg7

Glances has a Command Injection via Process Names in Action Command Templates

LOW 32

Glances is an open-source system cross-platform monitoring tool.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00252 Published 2026-03-18 Fixed in 4.5.2 CWE-78

TI-2026-25106 CVE-2026-32596 · GHSA-wvxv-4j8q-4wjq

Glances exposes the REST API without authentication

HIGH 77

Glances is an open-source system cross-platform monitoring tool.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.01584 Published 2026-03-18 Fixed in 4.5.2 CWE-200

TI-2026-23755 CVE-2026-30930 · GHSA-x46r-mf5g-xpr6

Glances has SQL Injection via Process Names in TimescaleDB Export

HIGH 67

Glances is an open-source system cross-platform monitoring tool.

CVSS 4.0HIGH 7.3 Local No auth No interaction EPSS 0.00417 Published 2026-03-10 Fixed in 4.5.1 CWE-89

TI-2026-23753 CVE-2026-30928 · GHSA-gh4x-f7cq-wwx6

Glances Exposes Unauthenticated Configuration Secrets

MEDIUM 47

Glances is an open-source system cross-platform monitoring tool.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0181 Published 2026-03-10 Fixed in 4.5.1 CWE-200

Vulnerabilities

Filters