Threats Tagged 'cve-2026-33533'
View all threats tagged with 'cve-2026-33533'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-33533'
Click on any threat for detailed analysis and mitigation recommendations
0 Glances versions prior to 4.5.3 have a permissive cross-origin resource sharing (CORS) policy in their XML-RPC server, allowing any origin to access system monitoring data. The server responds with Access-Control-Allow-Origin: * and does not validate the Content-Type header, enabling attacker-controlled webpages to send simple POST requests with XML-RPC payloads. This results in exposure of detailed system information including hostname, OS version, IP addresses, hardware stats, and full process lists with potentially sensitive command line arguments. The vulnerability is patched in version 4.5.3. Join the discussion | CVE Database V5 | 04/02/2026, 14:56:38 UTC Added: 04/02/2026, 15:08:28 UTC |
Showing 1 to 1 of 1 result