High severity8.8NVD Advisory· Published Jul 27, 2026· Updated Aug 20, 2026
CVE-2026-56747
CVE-2026-56747
Description
Improper control of generation of code in the JSON Pointer-to-accessor compiler in Cribl Stream before 4.18.2 allows a remote authenticated attacker with edit privileges to execute arbitrary JavaScript on the server via a crafted database connection identifier or pack configuration value.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
2- trust.cribl.io/notificationsnvdVendor Advisory
- docs.cribl.io/stream/release-notes/release-v4182/nvdRelease Notes
News mentions
0No linked articles in our index yet.