https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 21 Aug 2026 11:47:00 +0000 https://vulnerability.circl.lu/sighting/f3af3637-bd8b-4fd0-ae5b-d78680774e02/export {"uuid": "f3af3637-bd8b-4fd0-ae5b-d78680774e02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68518", "type": "seen", "source": "https://gist.github.com/alon710/890ba60aaa0a307f816165987f5ce246", "content": "# CVE-2026-68518: CVE-2026-68518: Command Injection Bypass in Glances via Cross-Field Shell-Operator Reconstruction\n\n> **CVSS Score:** 8.8\n> **Published:** 2026-08-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-68518\n\n## Summary\nA command injection bypass vulnerability exists in the Glances system monitoring tool prior to v4.5.6. This flaw permits an attacker with local process or container metadata control to bypass action-template sanitizers by reconstructing shell execution operators across adjacent unescaped variables. When a system alert triggers a configured action template, the reconstructed operators are evaluated by the underlying shell, leading to arbitrary code execution in the context of the Glances process.\n\n## TL;DR\nIncomplete sanitization of individual variables allows adjacent unescaped Mustache parameters to combine into a shell command operator (such as '&&'), leading to command execution when the template is rendered and executed.\n\n## Technical Details\n\n- **CWE ID**: CWE-78\n- **Attack Vector**: Local\n- **CVSS Score**: 8.8\n- **Exploit Status**: none\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Glances\n- **Glances**: < 4.5.6 (Fixed in: `4.5.6`)\n\n## Mitigation\n\n- Upgrade Glances to version 4.5.6 or higher to ensure the expanded sanitization blacklist is applied.\n- Modify custom action templates in glances.conf to avoid adjacent, unescaped variables like {{{name}}}{{{cmdline}}}.\n- Configure the Glances service to run with the lowest possible system privileges rather than root.\n\n**Remediation Steps:**\n1. Identify all systems running Glances versions prior to v4.5.6.\n2. Update the Glances installation package using pip or your operating system's package manager to v4.5.6 or newer.\n3. Audit 'glances.conf' to find any instances of adjacent unescaped variables.\n4. Insert delimiter characters or spaces between consecutive variables in the action template configuration.\n5. Restart the Glances service to apply configuration and software updates.\n\n## References\n\n- [GHSA-qcpp-8x79-hhp3: Command injection bypass of action-template sanitizer](https://github.com/nicolargo/glances/security/advisories/GHSA-qcpp-8x79-hhp3)\n- [Glances Fix Commit](https://github.com/nicolargo/glances/commit/9c280eae5419da680827024b60f6265956e31994)\n- [Glances v4.5.6 Release Notes](https://github.com/nicolargo/glances/releases/tag/v4.5.6)\n- [CVE-2026-68518 Authority Record](https://www.cve.org/CVERecord?id=CVE-2026-68518)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-68518) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-17T18:02:50.549150Z"} {"uuid": "f3af3637-bd8b-4fd0-ae5b-d78680774e02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68518", "type": "seen", "source": "https://gist.github.com/alon710/890ba60aaa0a307f816165987f5ce246", "content": "# CVE-2026-68518: CVE-2026-68518: Command Injection Bypass in Glances via Cross-Field Shell-Operator Reconstruction\n\n> **CVSS Score:** 8.8\n> **Published:** 2026-08-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-68518\n\n## Summary\nA command injection bypass vulnerability exists in the Glances system monitoring tool prior to v4.5.6. This flaw permits an attacker with local process or container metadata control to bypass action-template sanitizers by reconstructing shell execution operators across adjacent unescaped variables. When a system alert triggers a configured action template, the reconstructed operators are evaluated by the underlying shell, leading to arbitrary code execution in the context of the Glances process.\n\n## TL;DR\nIncomplete sanitization of individual variables allows adjacent unescaped Mustache parameters to combine into a shell command operator (such as '&&'), leading to command execution when the template is rendered and executed.\n\n## Technical Details\n\n- **CWE ID**: CWE-78\n- **Attack Vector**: Local\n- **CVSS Score**: 8.8\n- **Exploit Status**: none\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Glances\n- **Glances**: < 4.5.6 (Fixed in: `4.5.6`)\n\n## Mitigation\n\n- Upgrade Glances to version 4.5.6 or higher to ensure the expanded sanitization blacklist is applied.\n- Modify custom action templates in glances.conf to avoid adjacent, unescaped variables like {{{name}}}{{{cmdline}}}.\n- Configure the Glances service to run with the lowest possible system privileges rather than root.\n\n**Remediation Steps:**\n1. Identify all systems running Glances versions prior to v4.5.6.\n2. Update the Glances installation package using pip or your operating system's package manager to v4.5.6 or newer.\n3. Audit 'glances.conf' to find any instances of adjacent unescaped variables.\n4. Insert delimiter characters or spaces between consecutive variables in the action template configuration.\n5. Restart the Glances service to apply configuration and software updates.\n\n## References\n\n- [GHSA-qcpp-8x79-hhp3: Command injection bypass of action-template sanitizer](https://github.com/nicolargo/glances/security/advisories/GHSA-qcpp-8x79-hhp3)\n- [Glances Fix Commit](https://github.com/nicolargo/glances/commit/9c280eae5419da680827024b60f6265956e31994)\n- [Glances v4.5.6 Release Notes](https://github.com/nicolargo/glances/releases/tag/v4.5.6)\n- [CVE-2026-68518 Authority Record](https://www.cve.org/CVERecord?id=CVE-2026-68518)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-68518) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-17T18:02:50.549150Z"} https://vulnerability.circl.lu/sighting/f3af3637-bd8b-4fd0-ae5b-d78680774e02/export Mon, 17 Aug 2026 18:02:50 +0000 https://vulnerability.circl.lu/sighting/7766bcca-551c-4a31-aa3e-925b744b034e/export {"uuid": "7766bcca-551c-4a31-aa3e-925b744b034e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68518", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/b25kju3vqmpku", "content": "CVE-2026-68518 - Glances: Command injection bypass of action-template sanitizer via cross-field shell-operator reconstruction\nCVE ID : CVE-2026-68518\n \n Published : Aug. 17, 2026, 4:18 p.m. | 17\u00a0minutes ago\n \n Description : Glances is an open-source system cross-platform monit...", "creation_timestamp": "2026-08-17T17:46:25.305783Z"} {"uuid": "7766bcca-551c-4a31-aa3e-925b744b034e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68518", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/b25kju3vqmpku", "content": "CVE-2026-68518 - Glances: Command injection bypass of action-template sanitizer via cross-field shell-operator reconstruction\nCVE ID : CVE-2026-68518\n \n Published : Aug. 17, 2026, 4:18 p.m. | 17\u00a0minutes ago\n \n Description : Glances is an open-source system cross-platform monit...", "creation_timestamp": "2026-08-17T17:46:25.305783Z"} https://vulnerability.circl.lu/sighting/7766bcca-551c-4a31-aa3e-925b744b034e/export Mon, 17 Aug 2026 17:46:25 +0000 https://vulnerability.circl.lu/sighting/2d0781ed-5cfe-40f7-aaa2-100c41b5de07/export {"uuid": "2d0781ed-5cfe-40f7-aaa2-100c41b5de07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6851", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mr2k762a7v25", "content": "\u05d7\u05d5\u05dc\u05e9\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e7\u05e9\u05d4 \u05d1\u05d1\u05d9\u05d8\u05d3\u05e4\u05e0\u05d3\u05e8: CVE-2026-6851 - \u05e1\u05db\u05e0\u05d4 \u05e9\u05dc \u05d4\u05e2\u05dc\u05d0\u05ea \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea \u05d3\u05e8\u05da \u05e7\u05d9\u05e9\u05d5\u05e8\u05d9\u05dd \u05e1\u05d9\u05de\u05d1\u05d5\u05dc\u05d9\u05d9\u05dd\n\n\n\nhttps://khesef.xyz/posts/47F6CC8D-E4C0-41E8-83AC-4231031BA552", "creation_timestamp": "2026-07-20T05:18:44.394688Z"} {"uuid": "2d0781ed-5cfe-40f7-aaa2-100c41b5de07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6851", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mr2k762a7v25", "content": "\u05d7\u05d5\u05dc\u05e9\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e7\u05e9\u05d4 \u05d1\u05d1\u05d9\u05d8\u05d3\u05e4\u05e0\u05d3\u05e8: CVE-2026-6851 - \u05e1\u05db\u05e0\u05d4 \u05e9\u05dc \u05d4\u05e2\u05dc\u05d0\u05ea \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea \u05d3\u05e8\u05da \u05e7\u05d9\u05e9\u05d5\u05e8\u05d9\u05dd \u05e1\u05d9\u05de\u05d1\u05d5\u05dc\u05d9\u05d9\u05dd\n\n\n\nhttps://khesef.xyz/posts/47F6CC8D-E4C0-41E8-83AC-4231031BA552", "creation_timestamp": "2026-07-20T05:18:44.394688Z"} https://vulnerability.circl.lu/sighting/2d0781ed-5cfe-40f7-aaa2-100c41b5de07/export Mon, 20 Jul 2026 05:18:44 +0000 https://vulnerability.circl.lu/sighting/ca0bb14a-4acf-41c8-9fa9-97cc1432d0d1/export {"uuid": "ca0bb14a-4acf-41c8-9fa9-97cc1432d0d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6851", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2k6gjw5i2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-6851 \u0432 Bitdefender: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0442 \u0430\u0442\u0430\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438\n\n\n\nhttps://kripta.biz/posts/FAD1EF13-5ABB-46D8-A2F7-5BD69762258A", "creation_timestamp": "2026-07-20T05:18:19.731685Z"} {"uuid": "ca0bb14a-4acf-41c8-9fa9-97cc1432d0d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6851", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2k6gjw5i2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-6851 \u0432 Bitdefender: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0442 \u0430\u0442\u0430\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438\n\n\n\nhttps://kripta.biz/posts/FAD1EF13-5ABB-46D8-A2F7-5BD69762258A", "creation_timestamp": "2026-07-20T05:18:19.731685Z"} https://vulnerability.circl.lu/sighting/ca0bb14a-4acf-41c8-9fa9-97cc1432d0d1/export Mon, 20 Jul 2026 05:18:19 +0000