FR

live

CVE-2026-48710 · Kludex Starlette CVE-2026-49869 · Kestra Kestra OSS CVE-2026-59822 · BerriAI LiteLLM · CVSS 8.2 CVE-2026-82329 · JFrog Artifactory

vendor

Cribl

2: vulnerabilities tracked
27 July 2026: latest publication

cve

Vulnerability watch

idvulnerabilityseveritypublished

CVE-2026-56747Improper control of generation of code in the JSON Pointer-to-accessor compiler in Cribl Stream before 4.18.2 allows a remote authenticated attacker with edit privileges to execute arbitrary JavaScript on the server via a crafted database connection identifier or pack configuration value.Cribl Cribl Stream High CVSS 8.8 27/07 CVE-2026-56748Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authenticated attacker with Pack import and pipeline preview permissions to execute arbitrary code as the Cribl server process via a crafted Git repository containing a symbolic link in the pack's functions directory.Cribl Cribl Stream High CVSS 8.8 27/07