Our servers are protected against the PHP security vulnerability disclosed in October. The update was installed on 21 October 2026. More about php2shell

Kirby 4

Kirby 4 gets security updates until 28/11/2026.

Supported

Latest version: 4.9.6, released on 16/09/2026

End of support: 28/11/2026

1 known vulnerability open in 4.9.6

Vulnerabilities in Kirby 4

18 vulnerabilities from the NVD affect at least one version of this branch. Last checked on 03/11/2026.

CVE-2026-29905, CVSS 3.1: 6.5: still open in 4.9.6
CVE-2024-26483, CVSS 3.1: 8.8: not affected in 4.9.6
CVE-2024-41964, CVSS 3.1: 8.1: fixed in 4.3.1
CVE-2026-34587, CVSS 4.0: 7.6: fixed in 4.9.0
CVE-2026-42137, CVSS 4.0: 7.1: fixed in 4.9.0
CVE-2026-42069, CVSS 4.0: 7.1: fixed in 4.9.0
CVE-2026-41325, CVSS 4.0: 7.1: fixed in 4.9.0
CVE-2024-26482, CVSS 3.1: 7.1: not affected in 4.9.6
CVE-2026-32870, CVSS 4.0: 6.9: fixed in 4.9.0
CVE-2025-31493, CVSS 4.0: 6.3: fixed in 4.7.1
CVE-2025-30159, CVSS 4.0: 6.3: fixed in 4.7.1
CVE-2024-26484, CVSS 3.1: 6.1: not affected in 4.9.6
CVE-2024-27087, CVSS 3.1: 5.4: fixed in 4.1.1
CVE-2026-42174, CVSS 4.0: 5.3: fixed in 4.9.0
CVE-2026-42051, CVSS 4.0: 5.3: fixed in 4.9.0
CVE-2026-40099, CVSS 4.0: 5.3: fixed in 4.9.0
CVE-2024-26481, CVSS 3.1: 4.7: not affected in 4.9.6
CVE-2025-30207, CVSS 4.0: 2.3: fixed in 4.7.1

Get notified

Add Kirby with your version and Erseni Patch writes to you about new versions, vulnerabilities in exactly your version and the end of support.

Already have an account? Log in and add Kirby 4

All branches of Kirby

Vulnerabilities Software A-Z Imprint Privacy Accessibility English Deutsch © 2026 Erseni