Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user without the ability to edit a page could access revisions of the page through the revision compare view if they knew the primary key of two revisions. This could potentially result in disclosure of sensitive information. This vulnerability is fixed in 7.0.7, 7.3.2, and 7.4.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-44197 Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user without the ability to edit a page could access revisi… https://www.cve.org/CVERecord?id=CVE-2026-44197
Post summary
The post references CVE-2026-44197, identifies affected Wagtail versions, but provides no proof‑of‑concept, active exploitation, or patch information.
CVE-2026-44197 Unauthorized Page Revision Access in Wagtail CMS Prior to 7.0.7 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-44197 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
The post announces CVE-2026-44197, describing an unauthorized page revision access issue in Wagtail CMS before version 7.0.7, and provides links to vulnerability details and alerts, but offers no PoC, exploit, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | torchbox | wagtail | - | - | - |