Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 17:58:27 +0000 CVE-2026-42174 — Kirby: User avatar creation, replacement and deletion are not gated by user update permissions https://cve.radiocsirt.org/vuln/cve-2026-42174 <p><strong>Affected:</strong> getkirby kirby</p> <p>Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, user avatar creation, replacement and deletion are not gated by user update permissions. This issue has been patched in versions 4.9.0 and 5.4.0.</p> <p><strong>Affected:</strong> getkirby kirby</p> <p>Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, user avatar creation, replacement and deletion are not gated by user update permissions. This issue has been patched in versions 4.9.0 and 5.4.0.</p> https://cve.radiocsirt.org/vuln/cve-2026-42174