Vulnerability in Getkirby Kirby
CVE-2026-69127
Kirby is an open-source content management system. Prior to 4.9.5 and from 5.0.0 through 5.5.1, the REST API error handler can return unsanitized PHP error messages that expose the full filesystem path of the Kirby installation to unauthen…
Affected products
- Getkirby Kirby — versions < 4.9.5, >= 5.0.0, < 5.5.2
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)