Количество 5
Количество 5
CVE-2026-35588
Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.4, the Cassandra export module (`glances/exports/glances_cassandra/__init__.py`) interpolates `keyspace`, `table`, and `replication_factor` configuration values directly into CQL statements without validation. A user with write access to `glances.conf` can redirect all monitoring data to an attacker-controlled Cassandra keyspace. Version 4.5.4 contains a fix.
CVE-2026-35588
Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.4, the Cassandra export module (`glances/exports/glances_cassandra/__init__.py`) interpolates `keyspace`, `table`, and `replication_factor` configuration values directly into CQL statements without validation. A user with write access to `glances.conf` can redirect all monitoring data to an attacker-controlled Cassandra keyspace. Version 4.5.4 contains a fix.
CVE-2026-35588
Glances is an open-source system cross-platform monitoring tool. Prior ...
GHSA-grp3-h8m8-45p7
Glances has CQL Injection in its Cassandra Export Module via Unsanitized Config Values
BDU:2026-10402
Уязвимость модуля экспорта Cassandra прикладного программного интерфейса инструмента мониторинга Glances, позволяющая нарушителю выполнить произвольный код
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-35588 Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.4, the Cassandra export module (`glances/exports/glances_cassandra/__init__.py`) interpolates `keyspace`, `table`, and `replication_factor` configuration values directly into CQL statements without validation. A user with write access to `glances.conf` can redirect all monitoring data to an attacker-controlled Cassandra keyspace. Version 4.5.4 contains a fix. | CVSS3: 6.3 | 0% Низкий | 3 месяца назад |
 | CVE-2026-35588 Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.4, the Cassandra export module (`glances/exports/glances_cassandra/__init__.py`) interpolates `keyspace`, `table`, and `replication_factor` configuration values directly into CQL statements without validation. A user with write access to `glances.conf` can redirect all monitoring data to an attacker-controlled Cassandra keyspace. Version 4.5.4 contains a fix. | CVSS3: 6.3 | 0% Низкий | 3 месяца назад |
| CVE-2026-35588 Glances is an open-source system cross-platform monitoring tool. Prior ... | CVSS3: 6.3 | 0% Низкий | 3 месяца назад |
| GHSA-grp3-h8m8-45p7 Glances has CQL Injection in its Cassandra Export Module via Unsanitized Config Values | CVSS3: 6.3 | 0% Низкий | 3 месяца назад |
 | BDU:2026-10402 Уязвимость модуля экспорта Cassandra прикладного программного интерфейса инструмента мониторинга Glances, позволяющая нарушителю выполнить произвольный код | CVSS3: 6.3 | 0% Низкий | 3 месяца назад |
Уязвимостей на страницу