{"id":"CVE-2026-108924","state":"PUBLISHED","title":"getkirby Kirby Dynamic Option Generation OptionsQuery.php resolve authorization","description":"A vulnerability was identified in getkirby Kirby up to 4.9.5/5.5.3. Affected by this issue is the function OptionsQuery::resolve of the file src/Option/OptionsQuery.php of the component Dynamic Option Generation. The manipulation leads to authorization bypass. The attack is possible to be carried out remotely. Upgrading to version 4.9.6 and 5.6.0 can resolve this issue. You should upgrade the affected component.","publishedAt":"2026-10-12T19:30:14.551Z","updatedAt":"2026-10-16T17:19:37.353Z","severity":{"score":5.3,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X","source":"VulDB"},"assigner":"VulDB","products":["getkirby Kirby"],"affected":[{"vendor":"getkirby","product":"Kirby","versions":[{"version":"4.9.0","status":"affected"},{"version":"4.9.1","status":"affected"},{"version":"4.9.2","status":"affected"},{"version":"4.9.3","status":"affected"},{"version":"4.9.4","status":"affected"},{"version":"4.9.5","status":"affected"},{"version":"5.5.0","status":"affected"},{"version":"5.5.1","status":"affected"},{"version":"5.5.2","status":"affected"},{"version":"5.5.3","status":"affected"},{"version":"4.9.6","status":"unaffected"},{"version":"5.6.0","status":"unaffected"}],"cpes":["cpe:2.3:a:getkirby:kirby:*:*:*:*:*:*:*:*"],"modules":["Dynamic Option Generation"]}],"references":["https://vuldb.com/vuln/416748","https://vuldb.com/vuln/416748/cti","https://vuldb.com/cve/CVE-2026-108924","https://vuldb.com/submit/997196","https://github.com/getkirby/kirby/security/advisories/GHSA-8r9g-hhm3-5jfh","https://github.com/getkirby/kirby/security/advisories/GHSA-ch57-pqv8-vm6h","https://github.com/getkirby/kirby/releases/tag/4.9.6","https://github.com/getkirby/kirby/"],"weaknesses":["CWE-639","CWE-285"],"ingestedAt":"2026-10-29T20:10:33.477Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/108xxx/CVE-2026-108924.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-108924","state":"PUBLISHED","datePublished":"2026-10-12T19:30:14.551Z","dateUpdated":"2026-10-16T17:19:37.353Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-10-11T17:56:44.523Z"},"containers":{"cna":{"title":"getkirby Kirby Dynamic Option Generation OptionsQuery.php resolve authorization","descriptions":[{"lang":"en","value":"A vulnerability was identified in getkirby Kirby up to 4.9.5/5.5.3. Affected by this issue is the function OptionsQuery::resolve of the file src/Option/OptionsQuery.php of the component Dynamic Option Generation. The manipulation leads to authorization bypass. The attack is possible to be carried out remotely. Upgrading to version 4.9.6 and 5.6.0 can resolve this issue. You should upgrade the affected component."}],"affected":[{"vendor":"getkirby","product":"Kirby","versions":[{"version":"4.9.0","status":"affected"},{"version":"4.9.1","status":"affected"},{"version":"4.9.2","status":"affected"},{"version":"4.9.3","status":"affected"},{"version":"4.9.4","status":"affected"},{"version":"4.9.5","status":"affected"},{"version":"5.5.0","status":"affected"},{"version":"5.5.1","status":"affected"},{"version":"5.5.2","status":"affected"},{"version":"5.5.3","status":"affected"},{"version":"4.9.6","status":"unaffected"},{"version":"5.6.0","status":"unaffected"}],"cpes":["cpe:2.3:a:getkirby:kirby:*:*:*:*:*:*:*:*"],"modules":["Dynamic Option Generation"]}],"references":[{"url":"https://vuldb.com/vuln/416748","name":"VDB-416748 | getkirby Kirby Dynamic Option Generation OptionsQuery.php resolve authorization","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/416748/cti","name":"VDB-416748 | CTI Indicators (IOB, IOC, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/cve/CVE-2026-108924","name":"CVE-2026-108924 | CVE Analysis and Report","tags":["third-party-advisory"]},{"url":"https://vuldb.com/submit/997196","name":"Submit #997196 | getkirby Kirby CMS 5.6.0 Missing Authorization (CWE-862)","tags":["third-party-advisory"]},{"url":"https://github.com/getkirby/kirby/security/advisories/GHSA-8r9g-hhm3-5jfh","tags":["related"]},{"url":"https://github.com/getkirby/kirby/security/advisories/GHSA-ch57-pqv8-vm6h","tags":["broken-link"]},{"url":"https://github.com/getkirby/kirby/releases/tag/4.9.6","tags":["patch"]},{"url":"https://github.com/getkirby/kirby/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":4.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:X/RL:O/RC:C","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":4.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:X/RL:O/RC:C","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":4,"vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N/E:ND/RL:OF/RC:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-639","type":"CWE","lang":"en","description":"Authorization Bypass"}]},{"descriptions":[{"cweId":"CWE-285","type":"CWE","lang":"en","description":"Improper Authorization"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-10-12T19:30:14.551Z"},"timeline":[{"time":"2026-10-11T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-10-11T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-10-11T20:01:49.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"fernando viana (VulDB User)","type":"reporter"}],"x_generator":["VulDB PVTS v202610"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-10-16T16:31:03.471669Z","id":"CVE-2026-108924","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-10-16T17:19:37.353Z"}}]}}}