CVE-2026-71415

Kirby is an open-source content management system. From 5.0.0 until 5.5.2, Kirby's REST API chunk upload handler in src/Api/Upload.php did not run the relevant upload authorization preflight in Kirby\Api\Upload::process() before Kirby\Api\Upload::processChunk() persisted chunk data. An authenticated user with the access.panel permission enabled but with files.create, files.replace, and user/users.update permissions disabled could submit requests with an Upload-Length header and leave unfinished chunks in site/cache/.uploads for 24 hours. Repeating this process could consume attacker-controlled temporary storage, prevent other users from uploading files, or prevent site logic from storing data, although final permission checks still prevented unauthorized files from reaching the content or site/accounts directories. This issue is fixed in version 5.5.2.

• CWE-862

• https://github.com/getkirby/kirby/commit/37e206f3ed40ad3fab2e47e055ccb19e9c207dab
• https://github.com/getkirby/kirby/pull/8296
• https://github.com/getkirby/kirby/releases/tag/5.5.2
• https://github.com/getkirby/kirby/security/advisories/GHSA-67mx-6wf2-92xp

Published

Aug 31, 2026

Last Modified

Sep 8, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-71402An out-of-bounds read was found in the DHCPv4 packet capture…5.4
• CVE-2026-71403A flaw was found in Rancher Manager. The /v3/users update pa…6.1
• CVE-2026-71404A flaw was found in Rancher Manager. The GlobalRole controll…8.7
• CVE-2026-71407A Stack-based Buffer Overflow vulnerability [CWE-121] vulner…8.1
• CVE-2026-71408A allocation of resources without limits or throttling vulne…5.3
• CVE-2026-7141A vulnerability was found in vLLM up to 0.19.0. The affected…5.6
• CVE-2026-71416Headroom compresses data before the data reaches a large lan…8.8
• CVE-2026-71417Lemur manages TLS certificate creation. Prior to 1.9.3, POST…7.3
• CVE-2026-71418Suricata is a network Intrusion Detection System, Intrusion …7.5
• CVE-2026-7142A vulnerability was determined in Wooey up to 0.13.2. The im…6.3
• CVE-2026-71424Onyx is an open-source AI platform. Prior to 3.1.10, 3.2.14,…9.6
• CVE-2026-71428The unstructured library provides open-source components for…9.3