Cribl

cribl

3 CVEs • 2 products

Products (2)

Click to collapse

Toggle

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-56748 1Cribl 1Cribl Stream Aug 20, 2026 Jul 27, 2026 8.7 HIGH· v4 8.8 HIGH· v3 N/A· v2 Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authenticated attacker with Pack import and pipeline preview permissions to execute arbitrary code as the...Show more Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authenticated attacker with Pack import and pipeline preview permissions to execute arbitrary code as the Cribl server process via a crafted Git repository containing a symbolic link in the pack's functions directory.Show less
CVE-2026-56747 1Cribl 1Cribl Stream Aug 20, 2026 Jul 27, 2026 8.7 HIGH· v4 8.8 HIGH· v3 N/A· v2 Improper control of generation of code in the JSON Pointer-to-accessor compiler in Cribl Stream before 4.18.2 allows a remote authenticated attacker with edit privileges to execute arbitrary JavaScript on the server via...Show more Improper control of generation of code in the JSON Pointer-to-accessor compiler in Cribl Stream before 4.18.2 allows a remote authenticated attacker with edit privileges to execute arbitrary JavaScript on the server via a crafted database connection identifier or pack configuration value.Show less
CVE-2019-11076 1Cribl 1Cribl Jun 17, 2026 Apr 23, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Cribl UI 1.5.0 allows remote attackers to run arbitrary commands via an unauthenticated web request.