CVE-2026-43977 | wger-project wger up to 2.5 RoutineViewSet views.py has_object_permission

July 17, 2026 Yanac

A vulnerability classified as problematic has been found in wger-project wger up to 2.5. This vulnerability affects the function has_object_permission of the file wger/manager/api/views.py of the component RoutineViewSet. The manipulation leads to permission issues.

This vulnerability is traded as CVE-2026-43977. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More