{"id":"CVE-2026-126955","aliases":[],"cve":{"records":[{"id":"CVE-2026-126955","source":"VulnCheck","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-11-11T22:57:48.492Z","published":"2026-11-13T09:34:28.194Z","modified":"2026-11-13T22:30:42.848Z"}],"publishers":[{"name":"VulnCheck","role":"CNA","organizationId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","modified":"2026-11-13T09:34:28.194Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-13T22:30:42.848Z"}],"references":[{"url":"https://github.com/glanceapp/glance/security/advisories/GHSA-294x-cjq2-6j5r","tags":["vendor-advisory"],"source":"VulnCheck"},{"url":"https://github.com/glanceapp/glance/commit/e19081cfa029edbe16b1354ffe03076a8cdf0244","tags":["patch"],"source":"VulnCheck"},{"url":"https://github.com/glanceapp/glance/blob/v0.8.7/internal/glance/glance.go#L306-L316","tags":["technical-description"],"source":"VulnCheck"},{"url":"https://github.com/glanceapp/glance/releases/tag/v0.8.8","tags":["release-notes"],"source":"VulnCheck"},{"url":"https://www.vulncheck.com/advisories/glance-0.8.0-before-0.8.8-page-slug-enumeration-via-response-discrepancy","tags":["third-party-advisory"],"source":"VulnCheck"}],"weaknesses":[{"id":"CWE-204","description":"Observable Response Discrepancy","source":"VulnCheck"}],"applicability":[{"source":"VulnCheck","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:glance_project:glance:*:*:*:*:*:-:*:*","versionStartIncluding":"0.8.0","versionEndExcluding":"0.8.8"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-13T16:34:25.738695Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"yes"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Glance 0.8.0 before 0.8.8 Page Slug Enumeration via Response Discrepancy","titleSource":"VulnCheck","descriptionSource":"VulnCheck","description":"Glance from 0.8.0 before 0.8.8 contains an observable response discrepancy in handlePageRequest and handlePageContentRequest that allows unauthenticated attackers to enumerate configured page slugs. Attackers can request candidate names against /{page} or /api/pages/{page}/content/ and compare 303/401 versus 404 status codes to discover hidden page names.","score":6.9,"severity":"medium","published":"2026-11-13T09:34:28.194Z","modified":"2026-11-13T22:30:42.848Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"glanceapp","name":"glance","platforms":[],"versions":[{"version":"0.8.0","status":"affected","lessThan":"0.8.8","versionType":"semver"}],"defaultStatus":"unaffected","packageURL":"pkg:golang/github.com/glanceapp/glance","packageIdentity":{"ecosystem":"Go","name":"github.com/glanceapp/glance"},"cpes":[],"source":"VulnCheck","url":"https://www.cve.org/CVERecord?id=CVE-2026-126955"}],"remediation":[],"references":["https://github.com/glanceapp/glance/security/advisories/GHSA-294x-cjq2-6j5r","https://github.com/glanceapp/glance/commit/e19081cfa029edbe16b1354ffe03076a8cdf0244","https://github.com/glanceapp/glance/blob/v0.8.7/internal/glance/glance.go#L306-L316","https://github.com/glanceapp/glance/releases/tag/v0.8.8","https://www.vulncheck.com/advisories/glance-0.8.0-before-0.8.8-page-slug-enumeration-via-response-discrepancy"],"sources":[{"name":"CVE","id":"CVE-2026-126955","modified":"2026-11-13T22:30:42.848Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-126955"}],"assessments":[{"source":"VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","score":6.9},{"source":"VulnCheck","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","score":5.3}],"sourceAffected":[],"observedAt":"2026-11-13T23:01:55.151Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T03:10:34.932Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-13T23:15:50.874Z","attemptedAt":"2026-11-13T23:15:50.874Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-13T23:15:33.517Z","attemptedAt":"2026-11-13T23:15:33.517Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-13T23:15:33.109Z","attemptedAt":"2026-11-13T23:15:33.109Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-13T23:15:33.142Z","attemptedAt":"2026-11-13T23:15:33.142Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-125110","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-125110","modified":"Nov 13, 2026, 10:30:42 PM","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","checkedAt":"2026-11-13T23:15:33.109Z"},{"source":"FIRST EPSS","id":"CVE-2026-126955","url":"https://www.first.org/epss/","probability":0.00438,"percentile":0.38582,"date":"2026-11-13","checkedAt":"2026-11-13T23:15:33.142Z"},{"source":"GitHub Advisory Database","id":"GHSA-3q4x-35gh-jfxh","url":"https://github.com/advisories/GHSA-3q4x-35gh-jfxh","modified":"2026-11-13T12:31:38Z","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","checkedAt":"2026-11-13T23:15:33.517Z"},{"source":"NVD","id":"CVE-2026-126955","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-126955","modified":"2026-11-13T15:53:39.657","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","checkedAt":"2026-11-13T23:15:50.874Z"},{"source":"NVD","id":"CVE-2026-126955","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-126955","modified":"2026-11-13T15:53:39.657","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","checkedAt":"2026-11-13T23:15:50.874Z"}],"aiSummary":{"text":"Glance versions 0.8.0 before 0.8.8 have an observable response discrepancy, allowing unauthenticated attackers to enumerate page slugs by comparing status codes. The weakness is due to handlePageRequest and handlePageContentRequest. Attackers can discover hidden page names by requesting candidate names.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-13T13:51:07.290Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-126955"}]}}