Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Cribl Stream 4.18.2 Clear all filters
TI-2026-40921 CVE-2026-56748 · GHSA-xj69-cqwc-2w67

Authenticated RCE via Symlink Following in Cribl Stream Pack Git Import

Priority MEDIUM 41

Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authenticated attacker with Pack import and pipeline preview permissions to execute arbitrary code as the…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00919 Published 2026-07-27 Fixed in 4.18.2 CWE-61
TI-2026-40920 CVE-2026-56747 · GHSA-c2q2-868h-6pj2

Code Injection in JSON Pointer Processing Component in Cribl Stream

Priority MEDIUM 41

Improper control of generation of code in the JSON Pointer-to-accessor compiler in Cribl Stream before 4.18.2 allows a remote authenticated attacker with edit privileges to execute arbitrary JavaScript on the server via…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00669 Published 2026-07-27 Fixed in 4.18.2 CWE-94