CVE-2026-45392

Deferred Deferred - Pending Action

Remote Code Execution in Reserved Product

Publication date: 2026-05-12

Last updated on: 2026-06-02

Assigner: af879a92-7297-456a-bb0e-905ac6c64bdc

Description

DOM-based cross-site scripting (XSS) in Cribl Stream before 4.17.1 allows a remote attacker to execute arbitrary JavaScript in the browser of an authenticated user who is tricked into visiting a crafted URL and interacting with the page.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-12

Last Modified

2026-06-02

Generated

2026-07-11

AI Q&A

2026-05-12

EPSS Evaluated

2026-07-10

NVD

CVE-2026-45392

EUVD

EUVD-2026-29357

Affected Vendors & Products

Vendor	Product	Version / Range
cribl	stream	to 4.17.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-79	The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

Executive Summary

The specific details of CVE-2026-45392 have not been published yet, so the exact nature of the vulnerability is currently unknown.

However, it is related to Cribl Stream, and a critical security fix was released in version 4.17.1 to address vulnerabilities in prior versions.

Users are strongly encouraged to upgrade to this version to improve security.

Impact Analysis

Since the details of CVE-2026-45392 are not disclosed, the exact impact is unknown.

However, the existence of a critical security fix in Cribl Stream 4.17.1 suggests that the vulnerability could pose significant security risks if left unpatched.

Upgrading to the fixed version is recommended to mitigate potential risks.

Mitigation Strategies

Customers are strongly encouraged to upgrade to Cribl Stream version 4.17.1, which includes a critical security fix addressing vulnerabilities present in earlier versions.

Upgrading to this version is the recommended immediate step to mitigate potential risks associated with CVE-2026-45392.

Hi! I’m here to help you understand CVE-2026-45392. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70