CVE-2019-11076: cribl cribl – CVSS 9.8 · Watchpost

← All vulnerabilities

CVE-2019-11076

严重 9.8CVE-2019-11076 · Published 23/04/2019 · updated 17/06/2026

要点

CVE-2019-11076 是影响 cribl (cribl) 的严重 (CVSS 9.8)漏洞。
未来 30 天内被利用的概率（EPSS）：3.5%，高于 89.3% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
cribl cribl	`= 1.5.0`	No fix yet

Description

Cribl UI 1.5.0 allows remote attackers to run arbitrary commands via an unauthenticated web request.

References

docs.cribl.io/blog/release-v151 · Release Notes
livehybrid/poc-cribl-rce · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free