CVE-2026-44197 — Wagtail is an open source content management system built

title: CVE-2026-44197 - Wagtail Revision Compare Access
id: scw-2026-05-11-ai-1
status: experimental
level: medium
description: |
  Detects attempts to access the Wagtail revision compare view by crafting specific URLs with revision IDs. This behavior is indicative of exploiting CVE-2026-44197, where an unprivileged user could access page revisions if they knew the primary keys of two revisions, potentially leading to sensitive information disclosure.
author: SCW Feed Engine (AI-generated)
date: 2026-05-11
references:
  - https://shimiscyberworld.com/posts/nvd-CVE-2026-44197/
tags:
  - attack.privilege_escalation
  - attack.t1068
logsource:
    category: webserver
detection:
  selection:
      cs-uri: 
          - '/admin/pages/*/compare/'
      cs-method: 
          - 'GET'
      cs-uri-query: 
          - 'from_revision=*&to_revision=*'
  condition: selection
falsepositives:
  - Legitimate administrative activity

Source: Shimi's Cyber World · License & reuse