CVE-2026-126955
Received Received - Intake

Glance Page Slug Enumeration via Response Discrepancy

Publication date: 2026-11-13

Last updated on: 2026-11-13

Assigner: VulnCheck

Description
Glance from 0.8.0 before 0.8.8 contains an observable response discrepancy in handlePageRequest and handlePageContentRequest that allows unauthenticated attackers to enumerate configured page slugs. Attackers can request candidate names against /{page} or /api/pages/{page}/content/ and compare 303/401 versus 404 status codes to discover hidden page names.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-13
Last Modified
2026-11-13
Generated
2026-11-13
AI Q&A
2026-11-13
EPSS Evaluated
N/A
NVD
CVE-2026-126955
EUVD
EUVD-2026-125110

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
glanceapp glance From 0.8.0 (inc) to 0.8.8 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-204 The product provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor outside of the intended control sphere.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in Glance versions 0.8.0 to 0.8.7 allows unauthenticated attackers to enumerate configured page slugs by exploiting an observable response discrepancy. Attackers can send requests to endpoints like /{page} or /api/pages/{page}/content/ and compare HTTP status codes (303/401 vs 404) to determine if a page slug exists, even if it is hidden.

Detection Guidance

To detect this vulnerability, send HTTP requests to endpoints like /{page} or /api/pages/{page}/content/ and compare HTTP status codes. Real page slugs will return 303 or 401, while non-existent slugs return 404. Use tools like curl to automate this process.

Impact Analysis

The impact is pre-authentication information disclosure where page slugs are leaked. This aids attackers in reconnaissance by revealing hidden or sensitive page names, but does not expose content, credentials, or sensitive data directly. It could help attackers target further attacks more effectively.

Mitigation Strategies

Upgrade Glance to version 0.8.8 or later to patch the vulnerability. If upgrading is not immediately possible, restrict access to the vulnerable endpoints or implement rate limiting to reduce the risk of enumeration.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-126955. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...