Detections
Analytics

CVE-2026-42069

high

Description

Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, read access to site, user and role information is not gated by permissions. This issue has been patched in versions 4.9.0 and 5.4.0.

References

https://github.com/getkirby/kirby/security/advisories/GHSA-2h7v-4372-f6x2

https://github.com/getkirby/kirby/releases/tag/5.4.0

https://github.com/getkirby/kirby/releases/tag/4.9.0

Details

Source: Mitre, NVD

Published: 2026-05-09

Updated: 2026-05-18

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 6.5

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Severity: Medium

CVSS v4

Base Score: 7.1

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Severity: High

EPSS

EPSS: 0.0003