PT-2026-54839 · Wagtail · Wagtail

Alanturing881 + 1 · Published 2026-07-01 · Updated 2026-07-02 · CVE-2026-54262

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Wagtail versions prior to 7.0.8 Wagtail versions prior to 7.3.3 Wagtail versions prior to 7.4.2

Description A low-level user granted the "Can submit translation" permission can create translations for any page, regardless of whether they have the necessary permissions for those specific pages.

Recommendations Update to version 7.0.8 Update to version 7.3.3 Update to version 7.4.2

Fix

Weakness Enumeration

CWE-280

Related Identifiers

CVE-2026-54262

PYSEC-2026-615

Affected Products

Wagtail

References · 6

• https://github.com/wagtail/wagtail/security/advisories/GHSA-8634-mr4j-r72c · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-615 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-54262 · Security Note
• https://t.me/cveNotify/184729 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2072460428660113856 · Twitter Post
• https://t.me/cveNotify/184180 · Telegram Post