← All reports

The Glances monitoring tool has a vulnerability that allows Server-Side Request Forgery due to improper validation of the public_api configuration parameter.

CybersecurityTechnologyConflictApr 21, 2026score 0.172 posts · 0 replies across 1 instances
The thread discusses two security vulnerabilities in the Glances open-source monitoring tool, both related to improper validation and exposed APIs, highlighting potential risks in system monitoring tools.

Claims

The Glances monitoring tool has a vulnerability that allows Server-Side Request Forgery due to improper validation of the public_api configuration parameter.
Parent: CybersecurityEntity: Glances monitoring toolImpact: negativeDate: Apr 21, 2026Target: The Glances monitoring tool's security
The Glances monitoring tool exposes a REST API without authentication, allowing cross-origin requests from any origin.
Parent: CybersecurityEntity: Glances monitoring toolImpact: negativeDate: Apr 21, 2026Target: The Glances monitoring tool's security

Source posts

@[email protected]
🚨 EUVD-2026-23986 📊 Score: 7.7/10 (CVSS v3.1) 📦 Product: Glances 🏢 Vendor: nicolargo 📅 Updated: 2026-04-20 📝 Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.4, the Glances web server exposes a REST API (`/api/4/*`) that is accessible without authentication and allows cross-origin requests from any origin due to a permissive C... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-23986 #cybersecurity #infosec #euvd #cve #vulnerability
0 boosts · 0 favs · 0 replies · Apr 21, 2026
#cybersecurity#infosec#euvd#cve#vulnerability
@[email protected]
🚨 EUVD-2026-23990 📊 Score: 7.3/10 (CVSS v3.1) 📦 Product: Glances 🏢 Vendor: nicolargo 📅 Updated: 2026-04-20 📝 Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.4, a Server-Side Request Forgery (SSRF) vulnerability exists in the Glances IP plugin due to improper validation of the public_api configuration parameter. The value of p... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-23990 #cybersecurity #infosec #euvd #cve #vulnerability
0 boosts · 0 favs · 0 replies · Apr 21, 2026
#cybersecurity#infosec#euvd#cve#vulnerability