CVE-2019-11076

Cribl UI 1.5.0 allows remote attackers to run arbitrary commands via an unauthenticated web request.

• CWE-77

• https://docs.cribl.io/blog/release-v151Release Notes, Vendor Advisory
• https://github.com/livehybrid/poc-cribl-rceExploit, Third Party Advisory
• https://docs.cribl.io/blog/release-v151Release Notes, Vendor Advisory
• https://github.com/livehybrid/poc-cribl-rceExploit, Third Party Advisory

Published

Apr 23, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1107A remote code execution vulnerability exists in the way that…
• CVE-2019-11070WebKitGTK and WPE WebKit prior to version 2.24.1 failed to p…
• CVE-2019-11071SPIP 3.1 before 3.1.10 and 3.2 before 3.2.4 allows authentic…
• CVE-2019-11072lighttpd before 1.4.54 has a signed integer overflow, which …
• CVE-2019-11073A Remote Code Execution vulnerability exists in PRTG Network…7.2
• CVE-2019-11074A Write to Arbitrary Location in Disk vulnerability exists i…7.2
• CVE-2019-11077FastAdmin V1.0.0.20190111_beta has a CSRF vulnerability to a…8.8
• CVE-2019-11078MKCMS V5.0 has a CSRF vulnerability to add a new admin user …
• CVE-2019-1108An information disclosure vulnerability exists when the Wind…
• CVE-2019-11080Sitecore Experience Platform (XP) prior to 9.1.1 is vulnerab…
• CVE-2019-11081A default username and password in Dentsply Sirona Sidexis 4…
• CVE-2019-11082core/api/datasets/internal/actions/Explode.java in the Datas…