CVE-2026-108924
getkirby Kirby Dynamic Option Generation OptionsQuery.php resolve authorization
CVSS score
5.3
EPSS probability
%0.4
Risk score
0.0
Published
7 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
CVE-2026-108924: didactic PoC for Kirby dynamic option authorization bypass (★0)
Makefile Go / Python
Similar Vulnerabilities
8.2
6.9
CVE-2026-69127Kirby: System path exposure from error messages in the REST API
Patch status unknownEPSS %1
6.9
CVE-2026-75592Kirby: Access to image files outside of the site root via path traversal in the media handling
Patch status unknownEPSS %1
7.1
CVE-2026-71415Kirby: File upload permissions are not checked during processing of chunk data
Patch status unknownEPSS %0
6.5
6.5
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-108924"