VULNERABILITY INTELLIGENCE

CVE-2026-54262

CVSS score4.3 MEDIUM
EPSS probability0.27%
CISA KEVNot currently listed
Published2026-07-01
Last modified2026-07-02
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and 7.4.2, a low-level user with the "Can submit translation" permission can create translations for any page, including those they do not have permissions for. This issue has been fixed in versions 7.0.8, 7.3.3, and 7.4.2.

Weakness classification

  • security-advisories@github.com: CWE-280

Primary references