Advisories · Technology

Cribl Stream.

Every CVE that names Cribl Stream among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-56748 CVE record

CVSS 8.7 High

Authenticated RCE via Symlink Following in Cribl Stream Pack Git Import
- Cribl Stream
- CWE-61
Not analysed yet 27 Jul 2026
CVE-2026-56747 CVE record

CVSS 8.7 High

Code Injection in JSON Pointer Processing Component in Cribl Stream
- Cribl Stream
- Code injection
Not analysed yet 27 Jul 2026
CVE-2026-45392 CVE record

CVSS 7.1 High

DOM-based XSS in Cribl Stream
- Cribl Stream
- Cross-site scripting (XSS)
- CWE-20
Not analysed yet 12 May 2026