CVE-2026-25517

2 advisories.

PyPI/wagtail CVE-2026-25517: medium, EPSS 0.49%

Wagtail has improper permission handling on admin preview endpoints

Action: Upgrade wagtail to 6.3.6 or later.

pip install wagtail==6.3.6

pip install wagtail==7.0.4

pip install wagtail==7.1.3

pip install wagtail==7.2.2

pip install wagtail==7.3

Affected

introduced	fixed	last affected
0	6.3.6	-
6.4rc1	7.0.4	-
7.1rc1	7.1.3	-
7.2rc1	7.2.2	-
7.3rc1	7.3	-

Fixed versions

6.3.6

7.0.4

7.1.3

7.2.2

7.3

Sources

CVE-2026-25517 · published 2026-02-03T18:35:52Z · modified 2026-07-07T17:56:34.383033793Z · JSON

PyPI/wagtail CVE-2026-25517: unknown, EPSS 0.49%

Wagtail has improper permission handling on admin preview endpoints

Action: Upgrade wagtail to 6.3.6 or later.

pip install wagtail==6.3.6

pip install wagtail==7.0.4

pip install wagtail==7.1.3

pip install wagtail==7.2.2

pip install wagtail==7.3

Affected

introduced	fixed	last affected
0	6.3.6	-
6.4rc1	7.0.4	-
7.1rc1	7.1.3	-
7.2rc1	7.2.2	-
7.3rc1	7.3	-

Fixed versions

6.3.6

7.0.4

7.1.3

7.2.2

7.3

Sources

CVE-2026-25517 · published 2026-07-07T16:42:05.813187Z · modified 2026-07-07T17:47:20.455437139Z · JSON