cvefeed.io CVE-2026-54624: django CMS Structure Endpoint Vulnerability Disclosed
Article Content
- •CVE-2026-54624 allows unauthorized access to restricted page structures in django CMS.
- •The vulnerability affects versions prior to 5.0.8 and has a CVSS score of 6.5.
- •Users are urged to upgrade to version 5.0.8 to mitigate the risk of exploitation.
A vulnerability identified as CVE-2026-54624 affects django CMS versions prior to 5.0.8. The flaw allows any staff account to bypass page-view permissions, exposing restricted page structures. This occurs when the 'render_object_structure' function does not enforce user permissions, leading to potential data leakage of sensitive information such as link names and URLs. The vulnerability is rated with a CVSS score of 6.5, indicating a medium severity. It has been confirmed that the issue is fixed in version 5.0.8, released shortly after the vulnerability was disclosed. The flaw primarily impacts organizations using django CMS with specific permission settings enabled. Security updates are recommended for affected users to mitigate risks.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track CVE-2026-54624 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active… 
Critical Citrix NetScaler Vulnerabilities Actively Exploited in Finland The National Cyber Security Centre Finland (NCSC-FI) issued an alert regarding critical vulnerabilities in Citrix NetScaler ADC and Gateway products, specifically CVE-2026-88771 and CVE-2026-88772, which are being actively exploited in Finland. These vulnerabilities allow attackers to execute remote code without…