cbcvebase.

Glances Project Glances vulnerabilities

21 known vulnerabilities affecting glances_project/glances.

Total CVEs
21
CISA KEV
0
Public exploits
3
Exploited in wild
0
Severity breakdown
CRITICAL2HIGH15MEDIUM4

Vulnerabilities

Page 2 of 2
CVE-2026-46611P4MEDIUMCVSS 5.9≥ 0, < 4.5.52026-06-22
CVE-2026-46611 [MEDIUM] CWE-346 Glances: XML-RPC Server Missing Host Header Validation Enables DNS Rebinding Attack Glances: XML-RPC Server Missing Host Header Validation Enables DNS Rebinding Attack ### Summary The Glances XML-RPC server (`glances -s`, implemented in `glances/server.py`) does not validate the HTTP `Host` header, leaving it vulnerable to DNS rebinding attacks. CVE-2026-32632 (patched in 4.5.2) added `TrustedHostMiddleware` to the REST/WebUI server; the MCP server has had equiv
ghsa
← Previous2 / 2
Glances Project Glances vulnerabilities | cvebase