CVE-2026-30928Disclosure(nicolargo / glances)

LOWCVSS 7.5 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.1, the /api/4/config REST API endpoint returns the entire parsed Glances configuration file (glances.conf) via self.config.as_dict() with no filtering of sensitive values. The configuration file contains credentials for all configured backend services including database passwords, API tokens, JWT signing keys, and SSL key passwords. This vulnerability is fixed in 4.5.1.

nicolargo CVEs Back to dashboard

1.5/ 10 priority

Sources & remediation

Patch / fix

https://github.com/nicolargo/glances/commit/306a7136154ba5c1531489c99f8306d84eae37da

Exploit / PoC references

https://github.com/nicolargo/glances/security/advisories/GHSA-gh4x-f7cq-wwx6

Other references

https://github.com/nicolargo/glances/releases/tag/v4.5.1

Weakness type (CWE)

CWE-200

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

glances

Threat summary

Public PoC is present in monitored signal
4 mentions across 3 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Technical details provided in 3 signals
Disclosure: 2 classified signals
General: 2 classified signals
Peaked 2d ago at 2 mentions (2026-03-18); latest day: 1
4 total mentions across 3 days

Affected systems

Vendors

nicolargo

Products

glances

Deep dive

Activity timeline4 mentions / 3d

Signal classification2 categories

Disclosure

250.0%

General

250.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-18	2	Disclosure1General1
2026-03-22	1	Disclosure1
2026-05-02	1	General1

Full discourse4 posts

pdnuclei-bot@pdnuclei_bot203d
Disclosure
🚨 CVE-2026-30928 - high 🚨 Glances - Information Disclosure > Glances < 4.5.1 contains an information disclosure vulnerability caused by unfiltered... 👾 https://cloud.projectdiscovery.io/library/CVE-2026-30928 @pdnuclei #NucleiTemplates #cve
Post summary
The brief post announces the existence and technical details of CVE-2026-30928, an information disclosure issue in Glances versions below 4.5.1, and provides a link to a library entry likely containing additional resources or a proof of concept.
00021145
902 followersView on X
~lyn@lynettdoteth161d
General
@tiredhungryangr One? CVE-2026-2796, CVE-2026-24881, CVE-2026-24882, CVE-2025-32988, CVE-2025-32989, CVE-2025-64175, CVE-2026-25242, CVE-2026-28357, CVE-2026-28359, CVE-2026-26216, CVE-2026-26217, CVE-2026-25946, CVE-2026-32110, CVE-2026-30930, CVE-2026-30928, CVE-2026-32596...
Post summary
The tweet lists a series of CVE identifiers but provides no additional context or detail.
10000932
825 followersView on X
Infoflowcloud@infoflowcloud207d
General
🚨*CVE* CVE-2026-30928 Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.1, the /api/4/config REST API endpoint returns the entire parsed Glances configuration f… https://www.cve.org/CVERecord?id=CVE-2026-30928 ----- Traducción: CVE-2026-30928 Gla… http://infoflow.cloud`
Post summary
The post references CVE-2026-30928 and provides a brief technical detail about the exposed configuration but lacks information on exploits, patches, or active exploitation.
0100043
60 followersView on X
CVE@CVEnew207d
Disclosure
CVE-2026-30928 Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.1, the /api/4/config REST API endpoint returns the entire parsed Glances configuration f… https://www.cve.org/CVERecord?id=CVE-2026-30928
Post summary
The post discloses CVE-2026-30928, noting that the `/api/4/config` endpoint exposes the entire parsed configuration before v4.5.1, but offers no evidence of active exploitation, patches, or PoC.
00010192
56.7K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	nicolargo	glances	-	-	-

Explore more

Back to dashboard nicolargo CVEs glances vulnerabilities

What researchers are saying

CVE-2026-30928

~lyn[verified]@lynettdotethGeneral

The tweet lists a series of CVE identifiers but provides no additional context or detail.

pdnuclei-bot@pdnuclei_botDisclosure

The brief post announces the existence and technical details of CVE-2026-30928, an information disclosure issue in Glances versions below 4.5.1, and provides a link to a library entry likely containing additional resources or a proof of concept.

Infoflowcloud@infoflowcloudGeneral

The post references CVE-2026-30928 and provides a brief technical detail about the exposed configuration but lacks information on exploits, patches, or active exploitation.

CVE@CVEnewDisclosure

The post discloses CVE-2026-30928, noting that the `/api/4/config` endpoint exposes the entire parsed configuration before v4.5.1, but offers no evidence of active exploitation, patches, or PoC.