[MEDIUM] Kirby CMS's `pages.access` permission is not checked during rendering of page drafts

PKSA-ycvm-k4m4-tr9m CVE-2026-44176 GHSA-2xw4-v2wx-hqq9

Affected package: getkirby/cms

Affected version: >=5.0.0,<=5.4.0|<=4.9.0

Reported by:
GitHub