Lucene search
+L

1 matches found

OSV
OSV
added 2026/04/20 11:20 p.m.7 views

CVE-2026-35588 Glances has CQL Injection in its Cassandra Export Module via Unsanitized Config Values

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.4, the Cassandra export module glances/exports/glancescassandra/init.py interpolates keyspace, table, and replicationfactor configuration values directly into CQL statements without validation. A user with write...

6.3CVSS6AI score0.00212EPSS
SaveExploits1References5
Rows per page
Query Builder