Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Django Missing Authorization Vulnerability - CVE-2026-4292 - Vulnerability Database
Django

Django Missing Authorization Vulnerability - CVE-2026-4292

Low
Reference: CVE-2026-4292
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-4292
Title: Django Missing Authorization Vulnerability
Overview:

An issue was discovered in 6.0 before 6.0.4 5.2 before 5.2.13 and 4.2 before 4.2.30. Admin changelist forms using ModelAdmin.list_editable incorrectly allowed new instances to be created via forged POST data. Earlier unsupported Django series (such as 5.0.x 4.1.x and 3.2.x) were not evaluated and may also be affected. Django would like to thank Cantina for reporting this issue.