Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user without the ability to edit a page could still access the history report for the page, potentially resulting in disclosure of sensitive information. This vulnerability is fixed in 7.0.7, 7.3.2, and 7.4.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-44198 Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user without the ability to edit a page could still access … https://www.cve.org/CVERecord?id=CVE-2026-44198
Post summary
The CVE describes a Wagtail CMS vulnerability that allows unauthorized page access in outdated releases prior to 7.0.7, 7.3.2, and 7.4.
CVE-2026-44198 Information Disclosure in Wagtail CMS Through Unauthorized Histor... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-44198 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
This alert announces CVE-2026-44198, an information disclosure vulnerability in Wagtail CMS, and links to a vulnerability detail page without providing exploitation or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | torchbox | wagtail | - | - | - |