Vulnerability in N/a

CVE-2026-29905

Kirby CMS through 5.1.4 allows an authenticated user with 'Editor' permissions to cause a persistent Denial of Service (DoS) via a malformed image upload. The application fails to properly validate the return value of the PHP getimagesize(…

EPSS: 0.000 (4.8th percentile) — read the EPSS interpretation.

Affected products

  • N/a — versions n/a

References