Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Django Missing Authorization Vulnerability - CVE-2026-4277 - Vulnerability Database
Django

Django Missing Authorization Vulnerability - CVE-2026-4277

Critical
Reference: CVE-2026-4277
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-4277
Title: Django Missing Authorization Vulnerability
Overview:

An issue was discovered in 6.0 before 6.0.4 5.2 before 5.2.13 and 4.2 before 4.2.30. Add permissions on inline model instances were not validated on submission of forged POST data in GenericInlineModelAdmin. Earlier unsupported Django series (such as 5.0.x 4.1.x and 3.2.x) were not evaluated and may also be affected. Django would like to thank N05ecLZU-DSLab for reporting this issue.