CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Mend•added 2026/05/09 3:38 a.m.•12 views

CVE-2026-42137

Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, "pages.access/list" and "files.access/list" permissions are not consistently checked in the Panel and REST API. This issue has been patched in versions 4.9.0 and 5.4.0...

7.1CVSS5.5AI score0.00303EPSS

SaveExploits0References6

Rapid7 Vulnerability Database (full)•added 2026/05/09 12:00 a.m.•7 views

CVE-2026-42137: Missing Authorization

Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, pages.access/list and files.access/list permissions are not consistently checked in the Panel and REST API. This issue has been patched in versions 4.9.0 and 5.4.0...

7.1CVSS5.6AI score0.00303EPSS

SaveExploits0References4

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by