These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-68519 is a high-severity vulnerability in Glances, an open-source system monitoring tool. The issue allows for arbitrary command execution when an alert triggers, due to insecure use of shell operators in the `GlancesActions.run()` method. This CVE was published on 2026-08-17T18:18:06.610Z and was last modified on 2026-09-18T20:09:01.757Z.
CVE-2026-62982 is a high-severity vulnerability in Glances, an open-source system monitoring tool. The issue, fixed in version 4.5.6, allows for arbitrary code execution through administrator-configured action templates due to improper sanitization of user input. This vulnerability exists in Glances versions from 4.5.2 to 4.5.5 and is caused by the _sanitize_mustache_dict() function in glances/actions.py [truncated]
CVE-2026-68518 is a high-severity vulnerability in Glances, an open-source system monitoring tool that allows for shell command injection when an administrator renders an action template with attacker-controlled process or container fields. The vulnerability was introduced due to improper sanitization of Mustache values in the _sanitize_mustache_dict() function in glances/actions.py. This issue was fixed [truncated]
CVE-2026-68517 is a vulnerability in the Glances open-source system monitoring tool, affecting versions prior to 4.5.6. The issue arises from the cors_origins guard in glances/outputs/glances_restful_api.py, which uses exact list equality instead of wildcard membership. This allows a multi-origin list containing the wildcard to retain cors_credentials and expose authenticated REST API data to an untrusted [truncated]