https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T06:21:05.877010+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-42137 CVE-2026-42137 — Kirby: `pages.access/list` and `files.access/list` permissions are not consistently checked in the REST API and changes… 2026-10-15T06:21:05.894138+00:00

Affected: getkirby kirby

Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, `pages.access/list` and `files.access/list` permissions are not consistently checked in the Panel and REST API. This issue has been patched in versions 4.9.0 and 5.4.0.