The vulnerability of the export module of the TimescaleDB application programming interface for the Glances monitoring tool allows a perpetrator to escalate their privileges or execute arbitrary code.

The vulnerability of the export module of the TimescaleDB application programming interface for the Glances monitoring tool is related to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability can allow attackers to enhance their privileges or execut...

Linux Distros Unpatched Vulnerability : CVE-2026-30930

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.1, The TimescaleDB export module constructs SQL queries using string concatenation...

glances SQL注入漏洞

Glances is a system monitoring tool developed by Nicolas Hennion. Versions of Glances prior to 4.5.1 contained an SQL injection vulnerability. This vulnerability stemmed from the TimescaleDB export module using uncleaned data to construct SQL queries, which could lead to SQL injection attacks...

CVE-2026-30930: Improper Neutralization of Special Elements used in an SQL Command

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.1, The TimescaleDB export module constructs SQL queries using string concatenation with unsanitized system monitoring data. The normalize method wraps string values in single quotes but does not escape embedded single...