Known vulnerabilities in glances

Software: glances
Software CPE: cpe:2.3:a:nicolargo:glances:*:*:*:*:*:*:*:*
Total vulnerabilities: 25
Public exploits: 8
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting glances glances is affected by 25 known vulnerabilities: 3 high, 12 medium, 10 low Critical High Medium Low

Vulnerabilities (25)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140773 - Overly Permissive Cross-domain Whitelist
CVE-2026-68517
CWE-942 Medium
No
No
4.5.6 03.08.2026 SB2026080334
#VU140772 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-62982
CWE-78 Low
No
No
4.5.6 03.08.2026 SB2026080334
#VU140771 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-68518
CWE-78 Low
No
No
4.5.6 03.08.2026 SB2026080334
#VU140770 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-68519
CWE-78 Medium
No
No
4.5.6 03.08.2026 SB2026080334
#VU140769 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-46606
CWE-78 Low
No
No
4.5.5 03.08.2026 SB2026080333
#VU140768 - Deserialization of Untrusted Data
CVE-2026-46607
CWE-502 Low
No
No
4.5.5 03.08.2026 SB2026080333
#VU140767 - Overly Permissive Cross-domain Whitelist
CVE-2026-46608
CWE-942 Medium
No
No
4.5.5 03.08.2026 SB2026080333
#VU140766 - Origin Validation Error
CVE-2026-46611
CWE-346 Medium
No
No
4.5.5 03.08.2026 SB2026080333
#VU140765 - Command injection
CVE-2026-53925
CWE-77 Low
No
No
4.5.5 03.08.2026 SB2026080333
#VU126707 - Improper Access Control
CVE-2026-34839
CWE-284 Medium
No
No
4.5.2 21.04.2026 SB2026031946
#VU126706 - Server-Side Request Forgery (SSRF)
CVE-2026-35587
CWE-918 Low
No
No
4.5.4 21.04.2026 SB2026042161
#VU126705 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-35588
CWE-89 Low
No
No
4.4.1 21.04.2026 SB2026042159
#VU126704 - Improper Access Control
CVE-2026-33533
CWE-284 Medium
No
No
4.5.3 21.04.2026 SB2026042156
#VU126703 - Improper Access Control
CVE-2026-30928
CWE-284 Medium
No
No
4.5.1 21.04.2026 SB2026042155
#VU126702 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-30930
CWE-89 Low
No
No
4.5.1 21.04.2026 SB2026042155
#VU124688 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-33641
CWE-78 Low
No
No
4.5.2 30.03.2026 SB2026033043
#VU124146 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-32608
CWE-78 Low
Available
No
4.5.2 19.03.2026 SB2026031946
#VU124145 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-32611
CWE-89 High
Available
No
4.5.2 19.03.2026 SB2026031946
#VU124144 - Exposure of sensitive information to an unauthorized actor
CVE-2026-32609
CWE-200 Medium
Available
No
4.5.2 19.03.2026 SB2026031946
#VU124135 - Overly Permissive Cross-domain Whitelist
CVE-2026-32610
CWE-942 High
Available
No
4.5.2 19.03.2026 SB2026031946


Showing elements 1 - 20 out of 25