CVE-2026-108924

A vulnerability was identified in getkirby Kirby up to 4.9.5/5.5.3. Affected by this issue is the function OptionsQuery::resolve of the file src/Option/OptionsQuery.php of the component Dynamic Option Generation. The manipulation leads to authorization bypass. The attack is possible to be carried...

CVE-2026-108924 getkirby Kirby Dynamic Option Generation OptionsQuery.php resolve authorization

A vulnerability was identified in getkirby Kirby up to 4.9.5/5.5.3. Affected by this issue is the function OptionsQuery::resolve of the file src/Option/OptionsQuery.php of the component Dynamic Option Generation. The manipulation leads to authorization bypass. The attack is possible to be carried...

CVE-2026-108924

The getkirby Kirby CMS (versions up to 4.9.5 and 5.5.3 ) contains an authorization bypass vulnerability in the Dynamic Option Generation component. Specifically, the OptionsQuery::resolve function within the file src/Option/OptionsQuery.php is affected. This flaw can be exploited remotely to bypa...

CVE-2026-108924 getkirby Kirby Dynamic Option Generation OptionsQuery.php resolve authorization

A vulnerability was identified in getkirby Kirby up to 4.9.5/5.5.3. Affected by this issue is the function OptionsQuery::resolve of the file src/Option/OptionsQuery.php of the component Dynamic Option Generation. The manipulation leads to authorization bypass. The attack is possible to be carried...

EUVD-2026-97814

A vulnerability was identified in getkirby Kirby up to 4.9.5/5.5.3. Affected by this issue is the function OptionsQuery::resolve of the file src/Option/OptionsQuery.php of the component Dynamic Option Generation. The manipulation leads to authorization bypass. The attack is possible to be carried...

CVE-2026-108924: Authorization Bypass Through User-Controlled Key

A vulnerability was identified in getkirby Kirby up to 4.9.5/5.5.3. Affected by this issue is the function OptionsQuery::resolve of the file src/Option/OptionsQuery.php of the component Dynamic Option Generation. The manipulation leads to authorization bypass. The attack is possible to be carried...

PT-2026-110898

Name of the Vulnerable Software and Affected Versions Kirby versions prior to 4.9.6 Kirby versions prior to 5.6.0 Description An authorization bypass exists in the Dynamic Option Generation component. A remote attacker can exploit this by manipulating the OptionsQuery::resolve function within the...