Read the docs

Cribl

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Cribl records in CISA KEV

No Cribl vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cribl Stream 2 records MEDIUM Cribl 1 record MEDIUM

Records

2 records in Cribl Stream · all components

TI-2026-40921 CVE-2026-56748 · GHSA-xj69-cqwc-2w67

Authenticated RCE via Symlink Following in Cribl Stream Pack Git Import

Priority MEDIUM 41

Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authenticated attacker with Pack import and pipeline preview permissions to execute arbitrary code as the…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00919 Published 2026-07-27 Fixed in 4.18.2 CWE-61
TI-2026-40920 CVE-2026-56747 · GHSA-c2q2-868h-6pj2

Code Injection in JSON Pointer Processing Component in Cribl Stream

Priority MEDIUM 41

Improper control of generation of code in the JSON Pointer-to-accessor compiler in Cribl Stream before 4.18.2 allows a remote authenticated attacker with edit privileges to execute arbitrary JavaScript on the server via…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00669 Published 2026-07-27 Fixed in 4.18.2 CWE-94
Open these records in search →