CVE-2026-54624

CVE

Threat entity extracted from intelligence sources

Frequency

3

occurrences

First Seen

August 22, 2026

Last Seen

August 22, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CVE-2026-54624: django CMS Structure Endpoint Vulnerability Disclosed57.8

A vulnerability identified as CVE-2026-54624 affects django CMS versions prior to 5.0.8. The flaw allows any staff account to bypass page-view permissions, exposing restricted page structures. This occurs when the 'render_object_structure' function does not enforce user permissions, leading to poten...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

CVE-2026-54624: django CMS Structure Endpoint Vulnerability Disclosed

Aug 22·1 sources

Related Articles (3)

CVE-2026-54624 National Vulnerability Database / 1d django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0.8, render_object_structure in cms/views.py renders cms/toolbar/structure.html for a PageContent object without calling user_can_view_page(). Any staff account can request a restricted page’s structure when CMS_PERMISSION is enabled and the page has view restrictions or CMS_PUBLIC_FOR is set to staff. The response exposes plug

nvd.nist.gov·Aug 22

CVE-2026-54624 - django CMS: Structure endpoint bypasses page-view permission Latest Vulnerabilities / 1d CVE ID : CVE-2026-54624 Published : Aug. 20, 2026, 7:16 p.m. 40 minutes ago Description : django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0.8, render_object_structure in cms/views.py renders cms/toolbar/structure.html for a PageContent object without calling user_can_view_page(). Any staff account can request a restricted

cvefeed.io·Aug 22

CVE-2026-54624 - Exploits & Severity

Related Entities

Data Breach CWE-200 - Exposure of Sensitive Information CWE-862 - Missing Authorization CWE-269 - Improper Privilege Management Django Django CMS