CVE-2026-126955

Glance 0.8.0 before 0.8.8 Page Slug Enumeration via Response Discrepancy

Published Nov 13, 2026 CVSS 4.0 · 6.9 Medium EPSS n/a KEV · Not listed

Description

Glance from 0.8.0 before 0.8.8 contains an observable response discrepancy in handlePageRequest and handlePageContentRequest that allows unauthenticated attackers to enumerate configured page slugs. Attackers can request candidate names against /{page} or /api/pages/{page}/content/ and compare 303/401 versus 404 status codes to discover hidden page names.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

glanceapp

glance

unaffected

Version	Status	Constraints
`0.8.0`	affected	< 0.8.8

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

No advisories available

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://github.com/glanceapp/glance/blob/v0.8.7/internal/glance/glance.go#L306-L316
https://github.com/glanceapp/glance/commit/e19081cfa029edbe16b1354ffe03076a8cdf0244
https://github.com/glanceapp/glance/releases/tag/v0.8.8
https://github.com/glanceapp/glance/security/advisories/GHSA-294x-cjq2-6j5r
https://www.vulncheck.com/advisories/glance-0.8.0-before-0.8.8-page-slug-enumeration-via-response-discrepancy

History

Nov 13, 2026 9:45 AM Description updated. Title updated. First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		Glance from 0.8.0 before 0.8.8 contains an observable response discrepancy in handlePageRequest and handlePageContentRequest that allows unauthenticated attackers to enumerate configured page slugs. Attackers can request candidate names against /{page} or /api/pages/{page}/content/ and compare 303/401 versus 404 status codes to discover hidden page names.
Title		Glance 0.8.0 before 0.8.8 Page Slug Enumeration via Response Discrepancy
First Time appeared		Glance Project Glance Project glance
Weaknesses		CWE-204
CPEs		cpe:2.3:a:glance_project:glance::::::-::*
Vendors & Products		Glance Project Glance Project glance
References		https://github.com/glanceapp/glance/blob/v0.8.7/internal/glance/glance.go#L306-L316 https://github.com/glanceapp/glance/commit/e19081cfa029edbe16b1354ffe03076a8cdf0244 https://github.com/glanceapp/glance/releases/tag/v0.8.8 https://github.com/glanceapp/glance/security/advisories/GHSA-294x-cjq2-6j5r https://www.vulncheck.com/advisories/glance-0.8.0-before-0.8.8-page-slug-enumeration-via-response-discrepancy
Metrics		cvssV3_1 `{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'}` cvssV4_0 `{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N'}`