NVD Vulnerability Detail
Search Exploit, PoC
CVE-2026-42137
Summary

Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, `pages.access/list` and `files.access/list` permissions are not consistently checked in the Panel and REST API. This issue has been patched in versions 4.9.0 and 5.4.0.

Publication Date May 9, 2026, 1:16 p.m.
Registration Date May 10, 2026, 4:10 a.m.
Last Update May 9, 2026, 1:16 p.m.
Related information, measures and tools
Common Vulnerabilities List