ZeroDay Findings
Sign inSign up

Findings

CVE-2026-32633

Glances is an open-source system cross-platform monitoring tool.

Published Mar 18, 2026 · updated Jun 17, 2026 · nicolargo glances

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, the endpoint returns raw server objects from . Those objects are mutated in-place during background polling and can contain a field with embedded HTTP Basic credentials for downstream Glances servers, using the reusable pbkdf2-derived Glances authentication secret. If the front Glances Browser/API instance is started without , which is supported and common for internal network deployments, is completely unauthenticated. Any network user who can reach the Browser API can retrieve reusable credentials for protected downstream Glances servers once they have been polled by the browser instance. Version 4.5.2 fixes the issue.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 18, 2026 · NIST NVD

    Detected

    Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, the endpoint returns raw server objects from . Those objects are mutated in-place during background polling and can contain a field with embedded HTTP Basic credentials for downstream Glances servers, using the reusable pbkdf2-derived Glances authentication secret. If the front Glances

  2. Jun 17, 2026 · NIST NVD

    Updated

    Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, the endpoint returns raw server objects from . Those objects are mutated in-place during background polling and can contain a field with embedded HTTP Basic credentials for downstream Glances servers, using the reusable pbkdf2-derived Glances authentication secret. If the front Glances

Affected

  • cpe nicolargo/glancesversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-32633

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-32633

    Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, the endpoint returns raw server objects from . Those objects are mutated in-place during background pollin

    nvd.nist.gov

References