CVE-2026-62982

Glances is an open-source system cross-platform monitoring tool. From 4.5.2 until 4.5.6, _sanitize_mustache_dict() in glances/actions.py skips nested list and dictionary strings such as process cmdline values, allowing pipe characters to survive chevron.render() and be executed by secure_popen() through administrator-configured action templates. This issue is fixed in 4.5.6.

• CWE-78

• https://github.com/nicolargo/glances/commit/ea4cf2f54f0d961e24aa0b24fff9584bab39db93
• https://github.com/nicolargo/glances/releases/tag/v4.5.6
• https://github.com/nicolargo/glances/security/advisories/GHSA-73wf-9vmv-5pv9
• https://github.com/nicolargo/glances/security/advisories/GHSA-73wf-9vmv-5pv9

Published

Aug 17, 2026

Last Modified

Aug 17, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-62959Coturn is a free open source implementation of TURN and STUN…8.2
• CVE-2026-6296Heap buffer overflow in ANGLE in Google Chrome prior to 147.…9.6
• CVE-2026-62960Git for Windows is the Windows port of Git. Prior to 2.55.0.…7.4
• CVE-2026-62963Centrifugo is an open-source scalable real-time messaging se…8.7
• CVE-2026-6297Use after free in Proxy in Google Chrome prior to 147.0.7727…8.3
• CVE-2026-6298Heap buffer overflow in Skia in Google Chrome prior to 147.0…4.3
• CVE-2026-62986OpenEXR is the reference implementation and specification fo…4.3
• CVE-2026-62988Froxlor is open source server administration software. From …9
• CVE-2026-6299Use after free in Prerender in Google Chrome prior to 147.0.…8.8
• CVE-2026-62992Smarty is a template engine for PHP, facilitating the separa…6.9
• CVE-2026-62993Smarty is a template engine for PHP, facilitating the separa…6.9
• CVE-2026-62994CoreDNS is a DNS server written in Go. From 1.9.4 until 1.14…3.7