CVE-2026-56747 — Code Injection in JSON Pointer Processing Component in Cribl Stream
Improper control of generation of code in the JSON Pointer-to-accessor compiler in Cribl Stream before 4.18.2 allows a remote authenticated attacker with edit privileges to exec…
Published: 2026-07-27 · CVSS: 8.7 · CVSS 4.0
Improper control of generation of code in the JSON Pointer-to-accessor compiler in Cribl Stream before 4.18.2 allows a remote authenticated attacker with edit privileges to execute arbitrary JavaScript on the server via a crafted database connection identifier or pack configuration value.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7