SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-55468

MEDIUM · CVSS 4.3 EPSS 0.20% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-24 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The Wagtail content management system prior to specified versions has a vulnerability in its internal Pages admin API, which lacks adequate access controls, allowing users with admin privileges to access restricted draft and live page content. This could lead to unauthorized disclosure of sensitive information. Organizations using affected versions should prioritize upgrading to the patched releases to mitigate potential data exposure risks.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗ github.com ↗ github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-55468
Severity
MEDIUM
CVSS
4.3
EPSS
0.20%

Original NVD Description

Wagtail is an open source content management system built on Django. Prior to versions 7.0.9, 7.3.4, 7.4.3, and 8.0rc2 on their respective release lines, the internal Pages admin API returns page fields declared in api_fields without sufficient access control, allowing a user with Wagtail admin access to retrieve restricted draft and live page content. This issue is fixed in versions 7.0.9, 7.3.4, 7.4.3, and 8.0rc2.