CVE-2026-44177 | getkirby Kirby up to 5.4.0 Users Collection index.php find ID path traversal

July 16, 2026 Yanac

A vulnerability categorized as problematic has been discovered in getkirby Kirby up to 5.4.0. The affected element is the function find of the file index.php of the component Users Collection. Executing a manipulation of the argument ID can lead to path traversal.

This vulnerability is registered as CVE-2026-44177. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More