Vulnerability Description
Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, read access to site, user and role information is not gated by permissions. This issue has been patched in versions 4.9.0 and 5.4.0.
CVSS Score
6.5
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Getkirby | Kirby | < 4.9.0 |
Related Weaknesses (CWE)
References
- https://github.com/getkirby/kirby/releases/tag/4.9.0Release Notes
- https://github.com/getkirby/kirby/releases/tag/5.4.0Release Notes
- https://github.com/getkirby/kirby/security/advisories/GHSA-2h7v-4372-f6x2PatchVendor Advisory
FAQ
What is CVE-2026-42069?
CVE-2026-42069 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, read access to site, user and role information is not gated by permissions. This issue has been patched in version...
How severe is CVE-2026-42069?
CVE-2026-42069 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-42069?
Check the references section above for vendor advisories and patch information. Affected products include: Getkirby Kirby.