Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.1, The TimescaleDB export module constructs SQL queries using string concatenation with unsanitized system monitoring data. The normalize() method wraps string values in single quotes but does not escape embedded single quotes, making SQL injection trivial via attacker-controlled data such as process names, filesystem mount points, network interface names, or container names. This vulnerability is fixed in 4.5.1.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.1, The TimescaleDB export     module constructs SQL queries using string concatenation with unsanitized system monitoring data. The     normalize() method wraps string values in single quotes but does not escape embedded single quotes, making     SQL injection trivial via attacker-controlled data such as process names, filesystem mount points, network     interface names, or container names. This vulnerability is fixed in 4.5.1. (CVE-2026-30930)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.1, The TimescaleDB export
    module constructs SQL queries using string concatenation with unsanitized system monitoring data. The
    normalize() method wraps string values in single quotes but does not escape embedded single quotes, making
    SQL injection trivial via attacker-controlled data such as process names, filesystem mount points, network
    interface names, or container names. This vulnerability is fixed in 4.5.1. (CVE-2026-30930)

ID	Name	Product	Family	Type	Severity
301848	Linux Distros Unpatched Vulnerability : CVE-2026-30930	Nessus	Misc.	Local	high
438546	SCA: security update for Glances (GHSA-x46r-mf5g-xpr6)	Tenable Cloud Security	SCA Checks	Local	high
438546	SCA: security update for Glances (GHSA-x46r-mf5g-xpr6)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2026-30930

high

Tenable Plugins

high

high

high