CVE-2026-32596Disclosure(nicolargo / glances)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch nicolargo glances systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.2, Glances web server runs without authentication by default when started with `glances -w`, exposing REST API with sensitive system information including process command-lines containing credentials (passwords, API keys, tokens) to any network client. Version 4.5.2 fixes the issue.

nicolargo CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

https://github.com/nicolargo/glances/commit/208d876118fea5758970f33fd7474908bd403d25

Exploit / PoC references

https://github.com/nicolargo/glances/security/advisories/GHSA-wvxv-4j8q-4wjq

Other references

https://github.com/nicolargo/glances/releases/tag/v4.5.2

Weakness type (CWE)

CWE-200

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

glances

Threat summary

Patch or workaround signal is available
6 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 3 signals
Disclosure: 4 classified signals
General: 2 classified signals
Peaked 2d ago at 3 mentions (2026-03-18); latest day: 1
6 total mentions across 3 days

Affected systems

Vendors

nicolargo

Products

glances

Deep dive

Activity timeline6 mentions / 3d

Signal classification2 categories

Disclosure

466.7%

General

233.3%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-18	3	Disclosure3
2026-03-19	2	Disclosure1General1
2026-05-02	1	General1

Full discourse6 posts

pdnuclei-bot@pdnuclei_bot204d
Disclosure
🚨 CVE-2026-32596 - high 🚨 Glances - Information Disclosure > Glances < 4.5.2 contains an information disclosure vulnerability caused by the web se... 👾 https://cloud.projectdiscovery.io/library/CVE-2026-32596 @pdnuclei #NucleiTemplates #cve
Post summary
The post announces CVE‑2026‑32596 as a high‑severity information‑disclosure flaw affecting Glances versions below 4.5.2, linking to a Project Discovery page for more information but offering no exploit, patch, or evidence of active use.
00011100
901 followersView on X
~lyn@lynettdoteth159d
General
@tiredhungryangr One? CVE-2026-2796, CVE-2026-24881, CVE-2026-24882, CVE-2025-32988, CVE-2025-32989, CVE-2025-64175, CVE-2026-25242, CVE-2026-28357, CVE-2026-28359, CVE-2026-26216, CVE-2026-26217, CVE-2026-25946, CVE-2026-32110, CVE-2026-30930, CVE-2026-30928, CVE-2026-32596...
Post summary
The text consists solely of a list of CVE identifiers without any accompanying details or actionable information.
10000932
825 followersView on X
RedPacket Security@RedPacketSec204d
General
CVE Alert: CVE-2026-32596 - nicolargo - glances - https://www.redpacketsecurity.com/cve-alert-cve-2026-32596-nicolargo-glances/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-32596 #nicolargo #glances
Post summary
The post serves merely as a link to a CVE alert about CVE-2026-32596 for nicolargo glances, providing no additional details or actionable information.
0000073
3.6K followersView on X
CVE@CVEnew204d
Disclosure
CVE-2026-32596 Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.2, Glances web server runs without authentication by default when started with `glances … https://www.cve.org/CVERecord?id=CVE-2026-32596
Post summary
The CVE describes an unauthenticated access flaw in the Glances web server, which was fixed in release 4.5.2.
00000158
56.7K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds205d
Disclosure
CVE-2026-32596 Unauthenticated Information Disclosure in Glances Web Server Prior to 4.5.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-32596
Post summary
The entry reports CVE-2026-32596, an unauthenticated information disclosure in the Glances Web Server prior to version 4.5.2, but offers no PoC, exploit, or patch details.
0000031
4.0K followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash205d
Disclosure
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-32596 - Glances exposes the REST API without authentication Intel Report: https://ift.tt/hDcPXbZ
Post summary
A new CVE (CVE-2026-32596) affecting Glances has been disclosed, revealing that its REST API is exposed without authentication.
0000026
335 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	nicolargo	glances	-	-	-

Explore more

Back to dashboard nicolargo CVEs glances vulnerabilities

What researchers are saying

CVE-2026-32596

~lyn[verified]@lynettdotethGeneral

The text consists solely of a list of CVE identifiers without any accompanying details or actionable information.

pdnuclei-bot@pdnuclei_botDisclosure

The post announces CVE‑2026‑32596 as a high‑severity information‑disclosure flaw affecting Glances versions below 4.5.2, linking to a Project Discovery page for more information but offering no exploit, patch, or evidence of active use.

RedPacket Security@RedPacketSecGeneral

The post serves merely as a link to a CVE alert about CVE-2026-32596 for nicolargo glances, providing no additional details or actionable information.

CVE@CVEnewDisclosure

The CVE describes an unauthenticated access flaw in the Glances web server, which was fixed in release 4.5.2.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The entry reports CVE-2026-32596, an unauthenticated information disclosure in the Glances Web Server prior to version 4.5.2, but offers no PoC, exploit, or patch details.

CyberDudeBivash® | Global Cybersecurity Company@cyberbivashDisclosure

A new CVE (CVE-2026-32596) affecting Glances has been disclosed, revealing that its REST API is exposed without authentication.