Kit CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Kit CVE published 2026-10-18

CVE-2026-110880

A Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) convertkit allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Kit (formerly ConvertKit): from n/a through 3.4.6. The vulnerability could lead to potential unauthorized access and exploitation of incorrectly configured access control security levels. Defenders should assess exposure, prioritize v [truncated]