CVE Catalog
CVE-2026-42051
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.19%
9th percentile - higher than 9% of all known CVEs
Summary
Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, the system API endpoint leaks license data and installed version to authenticated users. This issue has been patched in versions 4.9.0 and 5.4.0.
Risk Assessment
An authenticated attacker can obtain license and version information, which may aid in further attacks or license compliance violations.
Recommendation
Update Kirby to version 4.9.0, 5.4.0, or later to apply the security fix.
Original NVD description (English source)
Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, the system API endpoint leaks license data and installed version to authenticated users. This issue has been patched in versions 4.9.0 and 5.4.0.