CVE-2026-54261

creationtimestamp| type| source ---|---|--- 2026-07-02 14:27:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoai3ophu2n 2026-07-02 14:27:40+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpoai5gvar2f 2026-07-03 13:30:06+00:00| seen|...

CVE-2026-54261

Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and 7.4.2, due to a missing permission check on the image preview endpoint, a user with access to the Wagtail admin can preview any image. The existing data of the image object itself is not...

CVE-2026-54261

Wagtail (Django-based CMS) has a permission-check flaw in the image preview endpoint. In versions prior to 7.0.8, 7.3.3, and 7.4.2, a user with admin access could preview any image due to a missing permission check; this does not expose the image data itself to ordinary site visitors. The issue h...