CVE-2026-103065
8.2 HIGHPublished 2026-10-03 · Updated 2026-10-06
AI risk analysis
- Summary
- This vulnerability allows for improper validation of specified quantity in input, potentially leading to unauthorized access to functionality not properly constrained by access control lists.
- Exploitability
- Exploitation requires access to the affected version of Kirki and knowledge of the specific input parameters, making it moderately difficult.
- Blast radius
- If exploited, this could lead to unauthorized access to restricted functionality, impacting the security and integrity of the application.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to Kirki 6.3.2 or later.
auth-bypasswebinput-validation
Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Kirki: from n/a through 6.3.1.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Weaknesses
CWE-1284
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-100559PoC
- HIGHCVE-2022-51019PoC
- HIGHCVE-2023-54403PoC
- CRITICALCVE-2025-15399
- HIGHCVE-2025-51457
- CRITICALCVE-2025-66455PoC
- CRITICALCVE-2025-70516
- MEDIUMCVE-2025-71420PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.