Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, `pages.access/list` and `files.access/list` permissions are not consistently checked in the Panel and REST API. This issue has been patched in versions 4.9.0 and 5.4.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-09 | 2 | General2 |
| 2026-05-11 | 1 | General1 |
⚡ New CVE Alert: CVE-2026-42137 📊 Severity: 7.1 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-42137 #CVE-2026-42137 #CVE #High #CyberSecurity #InfoSec https://t.co/JPk60WeJzY
Post summary
The tweet is a brief disclosure announcement of CVE-2026-42137, noting its severity and affected product scope, with no additional technical or exploit details.
CVE-2026-42137 Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, `pages.access/list` and `files.access/list` permissions are not consistently che… https://www.cve.org/CVERecord?id=CVE-2026-42137
Post summary
The snippet highlights an authorization bypass in Kirby CMS prior to versions 4.9.0/5.4.0 but offers no PoC, exploit details, or remediation advice.
CVE-2026-42137 Inconsistent Permission Checks in Kirby CMS Panel and REST API https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42137
Post summary
The text merely lists a CVE identifier and a URL, without providing any substantive information about the vulnerability, its exploitation status, or remediation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | getkirby | kirby | - | - | - |