Is CVE-2026-30930 actively exploited?

No active exploitation of CVE-2026-30930 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-30930 be exploited remotely?

No. CVE-2026-30930 requires local access to exploit.

What is the CVSS score of CVE-2026-30930?

CVE-2026-30930 has a CVSS score of 8.6 (HIGH).

HOME VULNERABILITIESCVE-2026-30930

HIGH

CVE-2026-30930

CWE-89Published: March 10, 2026· Updated: Mar 11, 2026

8.6

CVSS v3.1

EPSS:0.02%probability of exploitation in 30 daysPercentile:3.5th

Official Description

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.1, The TimescaleDB export module constructs SQL queries using string concatenation with unsanitized system monitoring data. The normalize() method wraps string values in single quotes but does not escape embedded single quotes, making SQL injection trivial via attacker-controlled data such as process names, filesystem mount points, network interface names, or container names. This vulnerability is fixed in 4.5.1.

NVD Source

Technical Analysis

CVE-2026-30930 requires local access, meaning attackers must already have a foothold on the target system.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

From a weakness classification perspective (CWE-89): SQL injection vulnerabilities allow attackers to manipulate database queries, potentially exposing or modifying sensitive data.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges Req.None

User InteractionNone

ScopeX

Impact

Confidentiality

Integrity

Availability

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X