https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:14:08.035619+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-56748 CVE-2026-56748 — Authenticated RCE via Symlink Following in Cribl Stream Pack Git Import 2026-10-02T10:14:08.037584+00:00

Affected: Cribl Stream

Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authenticated attacker with Pack import and pipeline preview permissions to execute arbitrary code as the Cribl server process via a crafted Git repository containing a symbolic link in the pack's functions directory.