MajorCritical vulnerability

CVE-2026-103065 (CVSS 8.2)

NVD · officialPublished Oct 3, 2026Risk 37/100

Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Kirki: from n/a through 6.3.1.

Technical details

CVSS

8.2

AV:NetworkAC:LowPR:NoneUI:NoneC:HighI:LowA:None

Evidence and sources

This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.

Open primary source