Beveiligingsadvies

CVE-2026-42137

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-09 03:38:35

Laatst bijgewerkt 2026-05-12 02:21:50

Toegewezen door GitHub_M

CVSS-score 7.1

Status PUBLISHED

Beschrijving

Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, `pages.access/list` and `files.access/list` permissions are not consistently checked in the Panel and REST API. This issue has been patched in versions 4.9.0 and 5.4.0.

← Alle CVE's bekijken Bekijk op cve.org ↗