Lucene search
+L

1 matches found

OSV
OSV
added 3 days ago3 views

CVE-2026-68520 Glances: as_dict_secure() Value-Level Bypass Leaks Credentials in URL Values via /api/4/config

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, asdictsecure in glances/config.py checks only option names and exposes publicusername and credentials embedded in publicapi values through unauthenticated GET /api/4/config and GET /api/4/config/ip requests. This iss...

5.3CVSS5.4AI score
SaveExploits0References5
Rows per page
Query Builder