{"schema_version":1,"title":"Nicolargo vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 16 vulnerabilities in Nicolargo: 0 in the last 7 days and 5 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-68520, was published on 17 August 2026. Nothing was published in the last eight weeks. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/nicolargo","json_url":"https://junglewise.ai/threats/vendors/nicolargo.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/nicolargo","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":11,"all_time":16,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":5,"last_365_days":16},"latest":[{"cve":"CVE-2026-68520","cvss":5.3,"epss":0.0041,"slug":"cve-2026-68520-glances-as-dict-secure-credential-leak-in-api-config-endpoint","title":"Glances as_dict_secure credential leak in API config endpoint","severity":"medium","exploited":false,"published_at":"2026-08-17T18:18:06.753+00:00","url":"https://junglewise.ai/threats/cve-2026-68520-glances-as-dict-secure-credential-leak-in-api-config-endpoint"},{"cve":"CVE-2026-68519","cvss":4,"epss":0.0018,"slug":"cve-2026-68519-glances-incomplete-fix-in-alert-action-command-execution","title":"Glances incomplete fix in alert action command execution","severity":"high","exploited":false,"published_at":"2026-08-17T18:18:06.61+00:00","url":"https://junglewise.ai/threats/cve-2026-68519-glances-incomplete-fix-in-alert-action-command-execution"},{"cve":"CVE-2026-62982","cvss":8.8,"epss":0.002,"slug":"cve-2026-62982-glances-incomplete-command-injection-sanitizer-fix-in-nested-stat","title":"Glances incomplete command injection sanitizer fix in nested stat values","severity":"high","exploited":false,"published_at":"2026-08-17T18:17:56.74+00:00","url":"https://junglewise.ai/threats/cve-2026-62982-glances-incomplete-command-injection-sanitizer-fix-in-nested-stat"},{"cve":"CVE-2026-68518","cvss":4,"epss":0.0017,"slug":"cve-2026-68518-glances-command-injection-via-cross-field-shell-operator","title":"Glances command injection via cross-field shell-operator reconstruction","severity":"high","exploited":false,"published_at":"2026-08-17T17:16:40.353+00:00","url":"https://junglewise.ai/threats/cve-2026-68518-glances-command-injection-via-cross-field-shell-operator"},{"cve":"CVE-2026-68517","cvss":6.5,"epss":0.0046,"slug":"cve-2026-68517-glances-rest-api-cors-credentials-bypass-via-wildcard-in-multi","title":"Glances REST API CORS credentials bypass via wildcard in multi-origin list","severity":"medium","exploited":false,"published_at":"2026-08-17T17:16:40.173+00:00","url":"https://junglewise.ai/threats/cve-2026-68517-glances-rest-api-cors-credentials-bypass-via-wildcard-in-multi"},{"cve":"CVE-2026-53925","cvss":7.8,"epss":0.0018,"slug":"cve-2026-53925-nicolargo-glances-command-injection-in-secure-popen-via-amp","title":"nicolargo Glances command injection in secure_popen via AMP configuration","severity":"high","exploited":false,"published_at":"2026-06-25T19:16:40.017+00:00","url":"https://junglewise.ai/threats/cve-2026-53925-nicolargo-glances-command-injection-in-secure-popen-via-amp"},{"cve":"CVE-2026-46611","cvss":5.3,"epss":0.0017,"slug":"cve-2026-46611-nicolargo-glances-dns-rebinding-in-xml-rpc-server","title":"nicolargo Glances DNS rebinding in XML-RPC server","severity":"medium","exploited":false,"published_at":"2026-06-25T19:16:37.8+00:00","url":"https://junglewise.ai/threats/cve-2026-46611-nicolargo-glances-dns-rebinding-in-xml-rpc-server"},{"cve":"CVE-2026-46608","cvss":7.4,"epss":0.004,"slug":"cve-2026-46608-nicolargo-glances-cors-wildcard-fallback-in-xml-rpc-server","title":"nicolargo Glances CORS wildcard fallback in XML-RPC server","severity":"high","exploited":false,"published_at":"2026-06-25T19:16:37.663+00:00","url":"https://junglewise.ai/threats/cve-2026-46608-nicolargo-glances-cors-wildcard-fallback-in-xml-rpc-server"},{"cve":"CVE-2026-46607","cvss":7.8,"epss":0.0036,"slug":"cve-2026-46607-nicolargo-glances-insecure-pickle-deserialization-in-version","title":"nicolargo Glances insecure pickle deserialization in version cache","severity":"high","exploited":false,"published_at":"2026-06-25T19:16:37.527+00:00","url":"https://junglewise.ai/threats/cve-2026-46607-nicolargo-glances-insecure-pickle-deserialization-in-version"},{"cve":"CVE-2026-46606","cvss":7.8,"epss":0.0021,"slug":"cve-2026-46606-nicolargo-glances-command-injection-in-virsh-py","title":"nicolargo Glances command injection in virsh.py","severity":"high","exploited":false,"published_at":"2026-06-25T19:16:37.38+00:00","url":"https://junglewise.ai/threats/cve-2026-46606-nicolargo-glances-command-injection-in-virsh-py"},{"cve":"CVE-2026-35588","cvss":6.3,"epss":0.0021,"slug":"cve-2026-35588-glances-has-cql-injection-in-its-cassandra-export-module-via","title":"Glances has CQL Injection in its Cassandra Export Module via Unsanitized Config Values","severity":"medium","exploited":false,"published_at":"2026-04-21T00:16:29.163+00:00","url":"https://junglewise.ai/threats/cve-2026-35588-glances-has-cql-injection-in-its-cassandra-export-module-via"},{"cve":"CVE-2026-35587","cvss":8.8,"epss":0.004,"slug":"cve-2026-35587-glances-has-ssrf-in-ip-plugin-via-public-api-leading-to","title":"Glances has SSRF in IP Plugin via public_api leading to credential leakage","severity":"high","exploited":false,"published_at":"2026-04-21T00:16:29.03+00:00","url":"https://junglewise.ai/threats/cve-2026-35587-glances-has-ssrf-in-ip-plugin-via-public-api-leading-to"},{"cve":"CVE-2026-34839","cvss":6.5,"epss":0.0041,"slug":"cve-2026-34839-glances-cross-origin-information-disclosure-via-unauthenticated","title":"Glances: Cross-Origin Information Disclosure via Unauthenticated REST API (/api/4) due to Permissive CORS","severity":"medium","exploited":false,"published_at":"2026-04-21T00:16:27.91+00:00","url":"https://junglewise.ai/threats/cve-2026-34839-glances-cross-origin-information-disclosure-via-unauthenticated"},{"cve":"CVE-2026-33641","cvss":7.8,"epss":0.0087,"slug":"cve-2026-33641-glances-vulnerable-to-command-injection-via-dynamic-configuration","title":"Glances Vulnerable to Command Injection via Dynamic Configuration Values","severity":"high","exploited":false,"published_at":"2026-04-02T15:16:40.04+00:00","url":"https://junglewise.ai/threats/cve-2026-33641-glances-vulnerable-to-command-injection-via-dynamic-configuration"},{"cve":"CVE-2026-33533","cvss":6.5,"epss":0.0033,"slug":"cve-2026-33533-glances-vulnerable-to-cross-origin-system-information-disclosure","title":"Glances Vulnerable to Cross-Origin System Information Disclosure via XML-RPC Server CORS Wildcard","severity":"high","exploited":false,"published_at":"2026-04-02T15:16:39.39+00:00","url":"https://junglewise.ai/threats/cve-2026-33533-glances-vulnerable-to-cross-origin-system-information-disclosure"},{"cve":"CVE-2026-32596","cvss":4,"epss":0.0175,"slug":"cve-2026-32596-nicolargo-glances-missing-authentication-in-rest-api","title":"nicolargo Glances missing authentication in REST API","severity":"high","exploited":false,"published_at":"2026-03-16T16:23:56+00:00","url":"https://junglewise.ai/threats/cve-2026-32596-nicolargo-glances-missing-authentication-in-rest-api"}],"vendor":{"hub":true,"name":"Nicolargo","slug":"nicolargo","description":"Developer of system monitoring and analysis tools for Unix-based systems.","url":"https://junglewise.ai/threats/vendors/nicolargo"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":5},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-35587","cvss":8.8,"epss":0.004,"slug":"cve-2026-35587-glances-has-ssrf-in-ip-plugin-via-public-api-leading-to","title":"Glances has SSRF in IP Plugin via public_api leading to credential leakage","severity":"high","exploited":false,"published_at":"2026-04-21T00:16:29.03+00:00","url":"https://junglewise.ai/threats/cve-2026-35587-glances-has-ssrf-in-ip-plugin-via-public-api-leading-to"},{"cve":"CVE-2026-62982","cvss":8.8,"epss":0.002,"slug":"cve-2026-62982-glances-incomplete-command-injection-sanitizer-fix-in-nested-stat","title":"Glances incomplete command injection sanitizer fix in nested stat values","severity":"high","exploited":false,"published_at":"2026-08-17T18:17:56.74+00:00","url":"https://junglewise.ai/threats/cve-2026-62982-glances-incomplete-command-injection-sanitizer-fix-in-nested-stat"},{"cve":"CVE-2026-33641","cvss":7.8,"epss":0.0087,"slug":"cve-2026-33641-glances-vulnerable-to-command-injection-via-dynamic-configuration","title":"Glances Vulnerable to Command Injection via Dynamic Configuration Values","severity":"high","exploited":false,"published_at":"2026-04-02T15:16:40.04+00:00","url":"https://junglewise.ai/threats/cve-2026-33641-glances-vulnerable-to-command-injection-via-dynamic-configuration"},{"cve":"CVE-2026-46607","cvss":7.8,"epss":0.0036,"slug":"cve-2026-46607-nicolargo-glances-insecure-pickle-deserialization-in-version","title":"nicolargo Glances insecure pickle deserialization in version cache","severity":"high","exploited":false,"published_at":"2026-06-25T19:16:37.527+00:00","url":"https://junglewise.ai/threats/cve-2026-46607-nicolargo-glances-insecure-pickle-deserialization-in-version"},{"cve":"CVE-2026-46606","cvss":7.8,"epss":0.0021,"slug":"cve-2026-46606-nicolargo-glances-command-injection-in-virsh-py","title":"nicolargo Glances command injection in virsh.py","severity":"high","exploited":false,"published_at":"2026-06-25T19:16:37.38+00:00","url":"https://junglewise.ai/threats/cve-2026-46606-nicolargo-glances-command-injection-in-virsh-py"},{"cve":"CVE-2026-53925","cvss":7.8,"epss":0.0018,"slug":"cve-2026-53925-nicolargo-glances-command-injection-in-secure-popen-via-amp","title":"nicolargo Glances command injection in secure_popen via AMP configuration","severity":"high","exploited":false,"published_at":"2026-06-25T19:16:40.017+00:00","url":"https://junglewise.ai/threats/cve-2026-53925-nicolargo-glances-command-injection-in-secure-popen-via-amp"},{"cve":"CVE-2026-46608","cvss":7.4,"epss":0.004,"slug":"cve-2026-46608-nicolargo-glances-cors-wildcard-fallback-in-xml-rpc-server","title":"nicolargo Glances CORS wildcard fallback in XML-RPC server","severity":"high","exploited":false,"published_at":"2026-06-25T19:16:37.663+00:00","url":"https://junglewise.ai/threats/cve-2026-46608-nicolargo-glances-cors-wildcard-fallback-in-xml-rpc-server"},{"cve":"CVE-2026-33533","cvss":6.5,"epss":0.0033,"slug":"cve-2026-33533-glances-vulnerable-to-cross-origin-system-information-disclosure","title":"Glances Vulnerable to Cross-Origin System Information Disclosure via XML-RPC Server CORS Wildcard","severity":"high","exploited":false,"published_at":"2026-04-02T15:16:39.39+00:00","url":"https://junglewise.ai/threats/cve-2026-33533-glances-vulnerable-to-cross-origin-system-information-disclosure"},{"cve":"CVE-2026-32596","cvss":4,"epss":0.0175,"slug":"cve-2026-32596-nicolargo-glances-missing-authentication-in-rest-api","title":"nicolargo Glances missing authentication in REST API","severity":"high","exploited":false,"published_at":"2026-03-16T16:23:56+00:00","url":"https://junglewise.ai/threats/cve-2026-32596-nicolargo-glances-missing-authentication-in-rest-api"},{"cve":"CVE-2026-68519","cvss":4,"epss":0.0018,"slug":"cve-2026-68519-glances-incomplete-fix-in-alert-action-command-execution","title":"Glances incomplete fix in alert action command execution","severity":"high","exploited":false,"published_at":"2026-08-17T18:18:06.61+00:00","url":"https://junglewise.ai/threats/cve-2026-68519-glances-incomplete-fix-in-alert-action-command-execution"}],"generated_at":"2026-11-09T03:07:00.176479+00:00","technologies":[{"name":"Nicolargo Glances","slug":"nicolargo-glances","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/nicolargo-glances"}]}