Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user with limited access to form pages could delete submissions to form pages they don't have access to by crafting a form submission to delete submissions on a page they do have access to for submissions they don't. The vulnerability is not exploitable by an ordinary site visitor without access to the Wagtail admin. This vulnerability is fixed in 7.0.7, 7.3.2, and 7.4.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-08 | 1 | General1 |
| 2026-05-11 | 3 | Disclosure3 |
CVE-2026-44199 Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user with limited access to form pages could delete submiss… https://www.cve.org/CVERecord?id=CVE-2026-44199
Post summary
The post reveals a deletion vulnerability in Wagtail CMS affecting versions prior to 7.0.7, 7.3.2, and 7.4, indicating an upgrade as the mitigation.
🚨*CVE* CVE-2026-44199 Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user with limited access to form pages could delete submiss… https://www.cve.org/CVERecord?id=CVE-2026-44199 ----- Traducción: CVE-2026-44199 Wag… http://infoflow.cloud`
Post summary
CVE‑2026‑44199 is a deletion flaw in Wagtail CMS versions prior to 7.0.7, 7.3.2, and 7.4 that allows a limited‑access user to remove form submissions; no exploit, patch, or active exploitation information is provided.
CVE-2026-44199 Cross-Page Form Submission Deletion Vulnerability in Wagtail CMS Below 7.0.7 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-44199
Post summary
The post announces a new CVE for Wagtail CMS with basic technical details, but provides no PoC, exploit, or patch information.
🟠 Wagtail, Improper Permission Handling, #CVE-2026-44199 (Medium) https://dailycve.com/wagtail-improper-permission-handling-cve-2026-44199-medium/
Post summary
The tweet merely references CVE‑2026‑44199 with a medium severity tag and links to a DailyCVE article, providing no detailed exploitation, mitigation or technical specifics.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | torchbox | wagtail | - | - | - |