CVE-2025-26699
Possible ATT&CK Techniques 1AI
T1499 · Endpoint Denial of ServiceGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-26699
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap() method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
不加限制或调节的资源分配
Source: CVE Program / CVE List V5
Vulnerability Title
Django 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Django是Django基金会的一套基于Python语言的开源Web应用框架。该框架包括面向对象的映射器、视图系统、模板系统等。 Django 5.1.7、5.0.13和4.2.20之前版本存在安全漏洞，该漏洞源于django.utils.text.wrap方法和wordwrap模板过滤器在处理非常长的字符串时可能导致拒绝服务攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| djangoproject | Django | 4.2 ~ 4.2.20 | - |
II. Public POCs for CVE-2025-26699
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-26699
请登录查看更多情报信息。
Vendor Advisories for CVE-2025-26699 (1)
Mailing List Discussions for CVE-2025-26699 (1)
Security Blog Posts for CVE-2025-26699 (1)
IV. Related Vulnerabilities
Same product: Django
- CVE-2026-15920
Potential cross-site scripting via URLField values in the ad - CVE-2026-15830
Potential denial-of-service vulnerability via nested geometr - CVE-2026-15337
Potential denial-of-service vulnerability in check_for_langu - CVE-2026-15307
Server-side file-write and request forgery via spatial looku - CVE-2026-53878
Header injection possibility since DomainNameValidator accep
Same vendor: djangoproject
- CVE-2026-15920
Potential cross-site scripting via URLField values in the ad - CVE-2026-15830
Potential denial-of-service vulnerability via nested geometr - CVE-2026-15337
Potential denial-of-service vulnerability in check_for_langu - CVE-2026-15307
Server-side file-write and request forgery via spatial looku - CVE-2026-53878
Header injection possibility since DomainNameValidator accep
Same weakness: CWE-770
- CVE-2026-46405
OpenBao's Kerberos Auth Method Accumulates Unaccessible Toke - CVE-2026-15972
Unauthenticated denial of service via unbounded external gRP - CVE-2026-19015
Uncontrolled resource consumption in the Consul Connect CA r - CVE-2026-19014
Uncontrolled resource consumption in the Consul Connect auth - CVE-2025-71410
Malicious Link Control Frames Can Cause Loss of CPDLC Functi
V. Comments for CVE-2025-26699
No comments yet