CVE-2026-32610

CVE-2026-32610 affects Glances versions prior to 4.5.2, stemming from a misconfigured Cross-Origin Resource Sharing (CORS) policy in its REST API web server. This critical vulnerability (CVSS 8.1 HIGH) allows remote attackers, with user interaction, to make credentialed cross-origin API requests, leading to high confidentiality and integrity impacts through the theft of sensitive system monitoring data, configuration secrets, and command-line arguments. While exploitation has low complexity, there is no evidence of active exploitation, nor are public exploit modules currently available, and community attention remains very low.