sign in--:--:--UTC

CVE-2026-1207

exploited in the wild☆ pin

CVSS

—

Reports

2

First seen

Jul 9, 2026

Last seen

Jul 13, 2026

Affected product

Django 4.2 (pre-4.2.28), Django 5.2 (pre-5.2.11), Django 6.0 (pre-6.0.2)

Associated actors

DragonForce ×1 GigaWiper operator ×1 Helix ×1 IronWorm ×1 Rare Werewolf ×1 SHELLSTORM ×1

Recent reports

Weekly Security Recap: ShareFile Threats, Citrix Bleed 2 Ransomware, Supply Chain Attacks

The Hacker NewsJul 13, 2026 High

Django Security Advisory (AV26-084) – CVE-2026-1207 Under Active Exploitation

Canadian Centre AlertsJul 9, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans