G
Vendor security profile
getkirby
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs10
Critical0
CISA KEV0
Public exploit1
Patch rate%50
Avg. CVSS6.0
12-month vulnerability rate
0
0
0
0
0
0
4
0
0
4
0
1
CVE KEV
CVE severity distribution
10toplam CVE
High2 (20%)
Medium8 (80%)
Patch and exploitation view
%50
Verified patch
%0
CISA KEV
%10
Public exploit
5Patch available
0Partial
0Workaround
0Vendor: no patch
5Unknown
Latest vulnerabilities
5.3
CVE-2026-108924
getkirby Kirby Dynamic Option Generation OptionsQuery.php resolve authorization
G
Patch verified
8.2
CVE-2026-75594
Kirby: Access to image files and limited access to JSON files outside of the site root via path traversal in the media handling
G
Patch status unknownEPSS %1
6.9
CVE-2026-75592
Kirby: Access to image files outside of the site root via path traversal in the media handling
G
Patch status unknownEPSS %1
7.1
CVE-2026-71415
Kirby: File upload permissions are not checked during processing of chunk data
G
Patch status unknownEPSS %0
6.9
CVE-2026-69127
Kirby: System path exposure from error messages in the REST API
G
Patch status unknownEPSS %1
4.3
CVE-2026-42174
Missing authorization in Getkirby
G
Patch verifiedEPSS %0
6.5
CVE-2026-42137
Missing authorization in Getkirby
G
Patch verifiedEPSS %0
6.5
CVE-2026-42069
Missing authorization in Getkirby
G
Patch verifiedEPSS %0
4.3
CVE-2026-42051
Missing authorization in Getkirby
G
Patch verifiedEPSS %0
4.3
CVE-2018-14519
Cross-site request forgery in Getkirby
G
Patch status unknownEPSS %0