VDB
CVE-2026-32609
CVE-2026-32609
PUBLISHED
CVSS 7.5 HIGH
Glances has Incomplete Secrets Redaction: /api/v4/args Endpoint Leaks Password Hash and SNMP Credentials
EPSS 0.51% · 43.1th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.51%
43.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| nicolargo | glances | *, < 4.5.2, 0 |
| PyPI | Glances | 0, 0, 0 |
Timeline
- Mar 16, 2026 CVE Published
- Mar 17, 2026 Security Advisory
- Mar 18, 2026 PoC Published
- Mar 19, 2026 CVE Updated
- Mar 19, 2026 EPSS Score
- Mar 20, 2026 PoC Published
- Mar 20, 2026 PoC Published
- Mar 21, 2026 EPSS Score
- Mar 22, 2026 EPSS Score
- Mar 24, 2026 EPSS Score
- May 18, 2026 EPSS Score
- May 19, 2026 EPSS Score
References
- https://github.com/nicolargo/glances/security/advisories/GHSA-cvwp-r2g2-j824 exploit
- https://github.com/nicolargo/glances package
- https://nvd.nist.gov/vuln/detail/CVE-2026-32609 advisory
- https://github.com/nicolargo/glances/commit/ff14eb9780ee10ec018c754754b1c8c7bfb6c44f fix
- https://github.com/nicolargo/glances/releases/tag/v4.5.2 fix