Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and 7.4.2, an authenticated admin user can trigger expensive rendition processing with purposefully crafted filter specs resulting in potentially service degradation. The vulnerability is not exploitable by an ordinary site visitor without access to the Wagtail admin. This issue has been fixed in versions 7.0.8, 7.3.3, and 7.4.2.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-54260 Denial of Service via Expensive Rendition Processing in Wagtail CMS Before 7.0.8 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-54260
Post summary
CVE‑2026‑54260 is a denial‑of‑service vulnerability in Wagtail CMS affecting all versions before 7.0.8, with no reported PoC, exploit, or active exploitation, but a patch is implied in 7.0.8.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | torchbox | wagtail | - | - | - |