#kirbycms

Thomas Kräftner @kraftner@mastodon.social

· 2mo ago

Replying to

@pluralistic@mamot.fr Yes, and it deserves a shout out again: Thank you @getkirby@mastodon.social for this change in spring: https://getkirby.com/license/2026-03-26/summary#improvements #kirbyCMS

Kirby CMS

EULA 2026-03-26: Summary of changes

Kirby is the content management system that adapts to any project. Made for developers, designers, creators and clients.

OffSequence @offseq@infosec.exchange

· 3mo ago

CVE-2026-54003 (CRITICAL, CVSS 9.1): getkirby Kirby CMS sites w/o users & behind certain reverse proxies risk remote admin creation via trusted IP headers. Upgrade to 4.9.4/5.4.4+ ASAP. More: https://radar.offseq.com/threat/cve-2026-54003-cwe-454-external-initialization-of--015a5d4d7df10357 #OffSeq #Vulnerability #KirbyCMS #InfoSec

OffSeq Threat Radar

CVE-2026-54003: CWE-454: External Initialization of Trusted… | Threat Radar

Vulnerability: Kirby is an open-source content management system. Prior to 4.9.4 and from 5.4.4, Kirby sites with no configured user accounts that run on…

You've seen all posts