Cribl: CVE Program partner

CVEs, 365 days55 all time, 0 rejected

Quality100%median 99%

CVSS by the CNA100%share of records

CWE100%share of records

Affected versions100%not n/a or unspecified

CVSS added by CISA0%lower is better

Organisation	Cribl, Inc.
Role	CNA
Type	Vendor
Reports to	icscert → CISA
Scope	Vulnerabilities identified in Cribl products, and vulnerabilities discovered by, or reported to, Cribl that are not in another CNA’s scope.
Advisories	https://trust.cribl.io/notifications

CVE-2026-56748 2026-07-27 · CVSS 8.8
Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authenticated attacker with Pack import and p
CVE-2026-56747 2026-07-27 · CVSS 8.7
Improper control of generation of code in the JSON Pointer-to-accessor compiler in Cribl Stream before 4.18.2 allows a remote authenticated attacker with edit p
CVE-2026-45393 2026-05-12 · CVSS 7.8
A vulnerability chain in Cribl Edge for Windows before 4.17.1 allows a local authenticated user to escalate privileges to NT AUTHORITY\SYSTEM. Incorrect default
CVE-2026-45392 2026-05-12 · CVSS 8.7
DOM-based cross-site scripting (XSS) in Cribl Stream before 4.17.1 allows a remote attacker to execute arbitrary JavaScript in the browser of an authenticated u
CVE-2026-45391 2026-05-12 · CVSS 7.8
A command injection vulnerability in Cribl Edge for Linux versions 3.2.0 through 4.17.0 allows a local unprivileged user to execute arbitrary commands in the co

Cribl