Threats tagged 'brew-glances-cve-2026-30930'

CVE-2026-30930 is a high-severity SQL injection vulnerability in the open-source system monitoring tool Glances, affecting versions prior to 4.5.1. The TimescaleDB export module improperly constructs SQL queries by concatenating unsanitized system monitoring data, such as process names or filesystem mount points, without escaping embedded single quotes. This flaw allows attackers to inject malicious SQL commands, potentially compromising the confidentiality, integrity, and availability of the database. The vulnerability does not require authentication or user interaction and has a CVSS 4.0 score of 7.3. It is fixed in Glances version 4.5.