Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: Cribl Clear all filters
TI-2026-40921 CVE-2026-56748 · GHSA-xj69-cqwc-2w67

Authenticated RCE via Symlink Following in Cribl Stream Pack Git Import

Priority MEDIUM 41

Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authenticated attacker with Pack import and pipeline preview permissions to execute arbitrary code as the…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00919 Published 2026-07-27 Fixed in 4.18.2 CWE-61
TI-2026-40920 CVE-2026-56747 · GHSA-c2q2-868h-6pj2

Code Injection in JSON Pointer Processing Component in Cribl Stream

Priority MEDIUM 41

Improper control of generation of code in the JSON Pointer-to-accessor compiler in Cribl Stream before 4.18.2 allows a remote authenticated attacker with edit privileges to execute arbitrary JavaScript on the server via…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00669 Published 2026-07-27 Fixed in 4.18.2 CWE-94
TI-2026-33183 CVE-2026-45393 · GHSA-2hpj-h2fj-2jg5

Local privilege escalation to SYSTEM in Cribl Edge for Windows

Priority LOW 36

A vulnerability chain in Cribl Edge for Windows before 4.17.1 allows a local authenticated user to escalate privileges to NT AUTHORITY\SYSTEM.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00221 Published 2026-05-12 Fixed in 4.17.1 CWE-276
TI-2026-33182 CVE-2026-45392 · GHSA-6gcc-j9m6-4752

DOM-based XSS in Cribl Stream

Priority LOW 31

DOM-based cross-site scripting (XSS) in Cribl Stream before 4.17.1 allows a remote attacker to execute arbitrary JavaScript in the browser of an authenticated user who is tricked into visiting a crafted URL and interacti…

CVSS 4.0HIGH 7.1 Network Low privileges User interaction EPSS 0.00281 Published 2026-05-12 Fixed in 4.17.1 CWE-79
TI-2026-33181 CVE-2026-45391 · GHSA-v5fp-5xmq-m2x6

Local privilege escalation in Cribl Edge for Linux

Priority LOW 39

A command injection vulnerability in Cribl Edge for Linux versions 3.2.0 through 4.17.0 allows a local unprivileged user to execute arbitrary commands in the context of the Cribl Edge service account.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00889 Published 2026-05-12 Fixed in 4.17.1 CWE-78