Cribl

6 CVEs across 3 Cribl products. Browse Cribl vulnerabilities, severities, and proof-of-concept exploits.

Cribl products with known CVEs

ProductCVEs
Cribl Stream3
Cribl Edge2
Cribl1
Cribl CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-56748High8.82026-07-27Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authenticated attacker with Pack import and…
CVE-2026-56747High8.82026-07-27Improper control of generation of code in the JSON Pointer-to-accessor compiler in Cribl Stream before 4.18.2 allows a remote authenticated attacker with edit…
CVE-2026-45393High7.82026-05-12A vulnerability chain in Cribl Edge for Windows before 4.17.1 allows a local authenticated user to escalate privileges to NT AUTHORITY\SYSTEM. Incorrect defaul…
CVE-2026-45392High8.72026-05-12DOM-based cross-site scripting (XSS) in Cribl Stream before 4.17.1 allows a remote attacker to execute arbitrary JavaScript in the browser of an authenticated…
CVE-2026-45391High7.82026-05-12A command injection vulnerability in Cribl Edge for Linux versions 3.2.0 through 4.17.0 allows a local unprivileged user to execute arbitrary commands in the c…
CVE-2019-11076Critical9.82019-04-23Cribl UI 1.5.0 allows remote attackers to run arbitrary commands via an unauthenticated web request.