🚨 CVE-2026-103275
Ghost 5.42.2 before 6.58.0 contains an information disclosure vulnerability in the Admin API bulk post and page edit and delete endpoints, which accept filters on restricted fields such as authors.password, because of an incomplete fix for CVE-2026-70590. Staff-level attackers can infer other staff users' password hashes from which filters match and perform offline password-guessing attacks against them.
🎖@cveNotify
Ghost 5.42.2 before 6.58.0 contains an information disclosure vulnerability in the Admin API bulk post and page edit and delete endpoints, which accept filters on restricted fields such as authors.password, because of an incomplete fix for CVE-2026-70590. Staff-level attackers can infer other staff users' password hashes from which filters match and perform offline password-guessing attacks against them.
🎖@cveNotify
GitHub
Fixed filter fields for bulk posts/pages requests (#30046) · TryGhost/Ghost@5ef16ab
no ref
Co-authored-by: UserExistsError <23325451+UserExistsError@users.noreply.github.com>
Co-authored-by: UserExistsError <23325451+UserExistsError@users.noreply.github.com>
🚨 CVE-2026-103276
Ghost versions before 6.20.0 contain a file extension filtering bypass vulnerability that allows unauthenticated attackers to read theme templates and metadata. Attackers can use URL encoding to bypass extension validation and access sensitive theme files.
🎖@cveNotify
Ghost versions before 6.20.0 contain a file extension filtering bypass vulnerability that allows unauthenticated attackers to read theme templates and metadata. Attackers can use URL encoding to bypass extension validation and access sensitive theme files.
🎖@cveNotify
GitHub
Denied Extension Bypass in Theme Serving via URL Encoding
### Impact
An unauthenticated user could read theme templates and metadata due to a bug in file extension filtering.
### Vulnerable versions
This vulnerability is present in Ghost versions...
An unauthenticated user could read theme templates and metadata due to a bug in file extension filtering.
### Vulnerable versions
This vulnerability is present in Ghost versions...
🚨 CVE-2026-103277
Ghost versions from 2.5.0 before 6.34.0 contain an untrusted script execution vulnerability in the oEmbed preview feature that fails to sandbox externally hosted scripts. Attackers can craft malicious oEmbed content to execute scripts in the context of a staff user's admin session, potentially compromising administrative access.
🎖@cveNotify
Ghost versions from 2.5.0 before 6.34.0 contain an untrusted script execution vulnerability in the oEmbed preview feature that fails to sandbox externally hosted scripts. Attackers can craft malicious oEmbed content to execute scripts in the context of a staff user's admin session, potentially compromising administrative access.
🎖@cveNotify
GitHub
Editor oEmbed Preview Allows Untrusted Script Execution
### Impact
The oEmbed preview in Ghost editor failed to sandbox externally hosted scripts, possibly resulting in compromise of a staff user's admin session.
### Vulnerable versions
Thi...
The oEmbed preview in Ghost editor failed to sandbox externally hosted scripts, possibly resulting in compromise of a staff user's admin session.
### Vulnerable versions
Thi...
🚨 CVE-2026-103278
Ghost versions 5.8.0 before 6.34.0 contain an input validation vulnerability in the admin iframe that allows attackers to take over staff user accounts. Attackers with content publishing privileges can craft malicious pages that, when visited by active staff users, enable account takeover through improper input validation.
🎖@cveNotify
Ghost versions 5.8.0 before 6.34.0 contain an input validation vulnerability in the admin iframe that allows attackers to take over staff user accounts. Attackers with content publishing privileges can craft malicious pages that, when visited by active staff users, enable account takeover through improper input validation.
🎖@cveNotify
GitHub
Input Validation Issue in Admin iframe Could Result in Staff Account Takeover
### Impact
An input validation vulnerability allowed anybody with the ability to publish content on the public site to take over a staff user's account. Exploitation required an active staff...
An input validation vulnerability allowed anybody with the ability to publish content on the public site to take over a staff user's account. Exploitation required an active staff...
🚨 CVE-2026-103279
Ghost versions from 3.10.0 before 6.34.0 fail to fully invalidate all sessions after a password change. Attackers with a stolen session cookie can maintain access to user accounts even after the associated user changes their password.
🎖@cveNotify
Ghost versions from 3.10.0 before 6.34.0 fail to fully invalidate all sessions after a password change. Attackers with a stolen session cookie can maintain access to user accounts even after the associated user changes their password.
🎖@cveNotify
GitHub
Staff Sessions not fully Invalidated on Password Change
### Impact
A vulnerability in Ghost admin failed to invalidate all sessions after a password reset. A stolen cookie would have remained valid even after the associated user changed their passwor...
A vulnerability in Ghost admin failed to invalidate all sessions after a password reset. A stolen cookie would have remained valid even after the associated user changed their passwor...
🚨 CVE-2026-103280
Ghost from version 0.8.0 before 6.23.0 contains an information disclosure vulnerability in its setup endpoint: the endpoint responds to unauthenticated requests with the site owner's email address, allowing any remote visitor to obtain it.
🎖@cveNotify
Ghost from version 0.8.0 before 6.23.0 contains an information disclosure vulnerability in its setup endpoint: the endpoint responds to unauthenticated requests with the site owner's email address, allowing any remote visitor to obtain it.
🎖@cveNotify
GitHub
Information Disclosure in Setup Endpoint
### Impact
An issue in the Ghost setup endpoint allowed unauthenticated visitors to query the site owner's email address.
### Vulnerable versions
This vulnerability is present in Ghost...
An issue in the Ghost setup endpoint allowed unauthenticated visitors to query the site owner's email address.
### Vulnerable versions
This vulnerability is present in Ghost...
🚨 CVE-2026-103281
Ghost (npm package 'ghost') versions from 3.23.0 up to, but not including, 6.23.0 expose API keys to users with low-privilege staff accounts. An authenticated low-privilege staff user can read API keys returned by the Admin API, which are intended to be available only to higher-privileged users.
🎖@cveNotify
Ghost (npm package 'ghost') versions from 3.23.0 up to, but not including, 6.23.0 expose API keys to users with low-privilege staff accounts. An authenticated low-privilege staff user can read API keys returned by the Admin API, which are intended to be available only to higher-privileged users.
🎖@cveNotify
GitHub
API Keys Exposed to Low-Privilege Staff
### Impact
A low-privilege staff user could read API keys from the Admin API.
### Vulnerable versions
This vulnerability is present in Ghost from v3.23.0 up to v6.23.0.
### Patches
v...
A low-privilege staff user could read API keys from the Admin API.
### Vulnerable versions
This vulnerability is present in Ghost from v3.23.0 up to v6.23.0.
### Patches
v...
🚨 CVE-2026-103282
Ghost versions 0.5.0 before 6.23.0 contain a concurrency issue in the staff invitation acceptance mechanism that allows multiple accounts to be created from a single invite token. Attackers can exploit this race condition by submitting concurrent requests with the same invitation token to create duplicate user accounts.
🎖@cveNotify
Ghost versions 0.5.0 before 6.23.0 contain a concurrency issue in the staff invitation acceptance mechanism that allows multiple accounts to be created from a single invite token. Attackers can exploit this race condition by submitting concurrent requests with the same invitation token to create duplicate user accounts.
🎖@cveNotify
GitHub
Invite Tokens could be Used Multiple Times
### Impact
A concurrency issue in accepting staff invitations could have resulted in the creation of multiple accounts.
### Vulnerable versions
This vulnerability is present in Ghost from ...
A concurrency issue in accepting staff invitations could have resulted in the creation of multiple accounts.
### Vulnerable versions
This vulnerability is present in Ghost from ...
🚨 CVE-2026-103284
Ghost versions from 5.125.1 before 6.57.1 contain an information disclosure vulnerability in the Admin Feedback endpoint that allows unauthorized staff users to access member data. Attackers with staff privileges can query the feedback endpoint to retrieve sensitive member information without proper authorization checks.
🎖@cveNotify
Ghost versions from 5.125.1 before 6.57.1 contain an information disclosure vulnerability in the Admin Feedback endpoint that allows unauthorized staff users to access member data. Attackers with staff privileges can query the feedback endpoint to retrieve sensitive member information without proper authorization checks.
🎖@cveNotify
GitHub
Feedback Endpoint Returned Member Data to Unauthorized Staff Users
### Impact
Unauthorized staff users were able to view member data through the Ghost Admin Feedback endpoint.
### Vulnerable versions
This vulnerability is present in Ghost from v5.125.1 up...
Unauthorized staff users were able to view member data through the Ghost Admin Feedback endpoint.
### Vulnerable versions
This vulnerability is present in Ghost from v5.125.1 up...
🚨 CVE-2026-103285
Ghost versions from 5.19.0 before 6.57.1 contain a cross-site request forgery vulnerability in the post feedback functionality that allows attackers to submit feedback on behalf of logged-in users. Attackers can craft a malicious link to the feedback page that automatically submits feedback when visited by authenticated members without their knowledge or consent.
🎖@cveNotify
Ghost versions from 5.19.0 before 6.57.1 contain a cross-site request forgery vulnerability in the post feedback functionality that allows attackers to submit feedback on behalf of logged-in users. Attackers can craft a malicious link to the feedback page that automatically submits feedback when visited by authenticated members without their knowledge or consent.
🎖@cveNotify
GitHub
Cross-Site Request Forgery in Post Feedback
### Impact
Post feedback was automatically submitted when navigating to a certain URL. Logged in members could unwittingly submit feedback if they followed a crafted link to the feedback page.
...
Post feedback was automatically submitted when navigating to a certain URL. Logged in members could unwittingly submit feedback if they followed a crafted link to the feedback page.
...
🚨 CVE-2026-103286
Ghost versions from 2.21.0 before 6.56.0 contain a privilege escalation vulnerability in the notifications system that allows low-privilege staff users to escalate to higher-privilege staff roles. Attackers with low-privilege staff access can exploit the notifications system to gain elevated privileges without proper authorization checks.
🎖@cveNotify
Ghost versions from 2.21.0 before 6.56.0 contain a privilege escalation vulnerability in the notifications system that allows low-privilege staff users to escalate to higher-privilege staff roles. Attackers with low-privilege staff access can exploit the notifications system to gain elevated privileges without proper authorization checks.
🎖@cveNotify
GitHub
Privilege Escalation in Notifications
### Impact
A vulnerability in the notifications system could allow a low-privilege staff user to escalate privileges to a higher-privilege staff user.
### Vulnerable versions
This vulnerab...
A vulnerability in the notifications system could allow a low-privilege staff user to escalate privileges to a higher-privilege staff user.
### Vulnerable versions
This vulnerab...
🚨 CVE-2026-103287
Ghost versions 1.18.0 before 6.27.0 contain a server-side request forgery vulnerability in the webhooks feature that allows staff users to probe internal hosts. Attackers with staff privileges can craft webhook requests to access internal network resources from the Ghost server.
🎖@cveNotify
Ghost versions 1.18.0 before 6.27.0 contain a server-side request forgery vulnerability in the webhooks feature that allows staff users to probe internal hosts. Attackers with staff privileges can craft webhook requests to access internal network resources from the Ghost server.
🎖@cveNotify
GitHub
Server-Side Request Forgery in Webhook Trigger
### Impact
An SSRF vulnerability in the webhooks feature allowed staff users to probe internal hosts from the Ghost server.
### Vulnerable versions
This vulnerability is present in Ghost f...
An SSRF vulnerability in the webhooks feature allowed staff users to probe internal hosts from the Ghost server.
### Vulnerable versions
This vulnerability is present in Ghost f...
🚨 CVE-2026-103288
Ghost, an open-source publishing platform, contains an input validation flaw in its comment like feature in versions from 5.9.0 before 6.44.1. An authenticated member can delete comment likes or dislikes belonging to other users that they are not authorized to delete, resulting in an authorization bypass and unauthorized modification of comment engagement data.
🎖@cveNotify
Ghost, an open-source publishing platform, contains an input validation flaw in its comment like feature in versions from 5.9.0 before 6.44.1. An authenticated member can delete comment likes or dislikes belonging to other users that they are not authorized to delete, resulting in an authorization bypass and unauthorized modification of comment engagement data.
🎖@cveNotify
GitHub
Authorization Bypass in Comment Like Feature
### Impact
An input validation issue allowed members to delete comment likes / dislikes that they were not authorized to delete.
### Vulnerable versions
This vulnerability is present in Gh...
An input validation issue allowed members to delete comment likes / dislikes that they were not authorized to delete.
### Vulnerable versions
This vulnerability is present in Gh...
🚨 CVE-2026-103289
Ghost from 5.9.0 before 6.44.1 contains an input validation issue in the comments feature that allows authenticated members to access comments they are not authorized to view, resulting in disclosure of restricted comment data.
🎖@cveNotify
Ghost from 5.9.0 before 6.44.1 contains an input validation issue in the comments feature that allows authenticated members to access comments they are not authorized to view, resulting in disclosure of restricted comment data.
🎖@cveNotify
GitHub
Authorization Bypass in Comments Feature
### Impact
An input validation issue allowed members to access comments they were not authorized to access.
### Vulnerable versions
This vulnerability is present in Ghost from v5.9.0 up to...
An input validation issue allowed members to access comments they were not authorized to access.
### Vulnerable versions
This vulnerability is present in Ghost from v5.9.0 up to...
🚨 CVE-2026-103290
Ghost versions 6.14.0 through versions prior to 6.27.0 contain a path traversal vulnerability in the ImageSize service. Insufficient input validation of user-supplied file paths may allow authenticated staff users to access local files outside the intended data storage directories on the server.
🎖@cveNotify
Ghost versions 6.14.0 through versions prior to 6.27.0 contain a path traversal vulnerability in the ImageSize service. Insufficient input validation of user-supplied file paths may allow authenticated staff users to access local files outside the intended data storage directories on the server.
🎖@cveNotify
GitHub
Path Traversal Vulnerability in Ghost ImageSize Service
### Impact
An input validation issue may have allowed staff users to access local files outside the intended data storage directories on the server.
### Vulnerable versions
This vulnerabil...
An input validation issue may have allowed staff users to access local files outside the intended data storage directories on the server.
### Vulnerable versions
This vulnerabil...
🚨 CVE-2026-103291
Ghost versions from 3.20.2 before 6.51.0 contain a server-side request forgery vulnerability in image dimension refetching that allows authenticated staff users to trigger outbound HTTP requests to arbitrary URLs. Attackers can point image cards at attacker-controlled hosts or internal network endpoints to access metadata services and internal resources unavailable from the public internet.
🎖@cveNotify
Ghost versions from 3.20.2 before 6.51.0 contain a server-side request forgery vulnerability in image dimension refetching that allows authenticated staff users to trigger outbound HTTP requests to arbitrary URLs. Attackers can point image cards at attacker-controlled hosts or internal network endpoints to access metadata services and internal resources unavailable from the public internet.
🎖@cveNotify
GitHub
Mobiledoc image-size fetch SSRF
## Impact
When re-rendering posts, Ghost would refetch missing image dimensions by issuing an outbound HTTP request to the URL stored on an image card — without restricting that URL to trusted i...
When re-rendering posts, Ghost would refetch missing image dimensions by issuing an outbound HTTP request to the URL stored on an image card — without restricting that URL to trusted i...
🚨 CVE-2026-103292
Ghost versions from 0.5.3 through versions prior to 6.50.0 fail to sanitize the data placed in the JSON-LD HTML tag emitted by the {{ghost_head}} helper. An authenticated user with limited privileges can inject unescaped content that is rendered as script in the published page, potentially leading to compromise of a staff user's admin session when that user views the affected page.
🎖@cveNotify
Ghost versions from 0.5.3 through versions prior to 6.50.0 fail to sanitize the data placed in the JSON-LD HTML tag emitted by the {{ghost_head}} helper. An authenticated user with limited privileges can inject unescaped content that is rendered as script in the published page, potentially leading to compromise of a staff user's admin session when that user views the affected page.
🎖@cveNotify
GitHub
Unescaped JSON-LD Tag Allows Untrusted Script Execution via {{ghost_head}}
## Impact
The JSON-LD HTML tag output by the `{{ghost_head}}` helper failed to sanitize data, possibly resulting in compromise of a staff user's admin session.
## Vulnerable Versions
T...
The JSON-LD HTML tag output by the `{{ghost_head}}` helper failed to sanitize data, possibly resulting in compromise of a staff user's admin session.
## Vulnerable Versions
T...
🚨 CVE-2026-103353
Incorrect Behavior Order vulnerability in WP ManageNinja LLC FluentForm fluentform allows Removing Important Client Functionality.This issue affects FluentForm: from n/a through 6.2.14.
🎖@cveNotify
Incorrect Behavior Order vulnerability in WP ManageNinja LLC FluentForm fluentform allows Removing Important Client Functionality.This issue affects FluentForm: from n/a through 6.2.14.
🎖@cveNotify
Patchstack
Broken Access Control in WordPress FluentForm Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
🚨 CVE-2026-103757
Budibase through 3.41.0 contains a server-side request forgery vulnerability in AI table generation because the uploadUrl function in packages/server/src/utilities/fileUtils.ts uses raw node-fetch instead of fetchWithBlacklist. Authenticated builder users can send a prompt to POST /api/ai/tables that places an internal URL in an attachment column, causing the server to fetch it and return a presigned object-storage URL containing the response, such as cloud metadata credentials.
🎖@cveNotify
Budibase through 3.41.0 contains a server-side request forgery vulnerability in AI table generation because the uploadUrl function in packages/server/src/utilities/fileUtils.ts uses raw node-fetch instead of fetchWithBlacklist. Authenticated builder users can send a prompt to POST /api/ai/tables that places an internal URL in an attachment column, causing the server to fetch it and return a presigned object-storage URL containing the response, such as cloud metadata credentials.
🎖@cveNotify
GitHub
SSRF in AI Table Generation via uploadUrl: raw fetch without blacklist protection
## Summary
The `uploadUrl` function in `packages/server/src/utilities/fileUtils.ts` uses raw `node-fetch` without SSRF protection. Every other outbound fetch in the codebase uses `fetchWithBlack...
The `uploadUrl` function in `packages/server/src/utilities/fileUtils.ts` uses raw `node-fetch` without SSRF protection. Every other outbound fetch in the codebase uses `fetchWithBlack...
🚨 CVE-2026-103758
Obot 0.21.1 through 0.24.1 contains an authorization bypass vulnerability that allows authenticated users to reach MCP servers because the checkUI deny list omits the /mcp-connect-composite/ route. Basic-role users with a composite MCP ID can proxy requests through mcpGateway.Proxy to invoke tools on MCP servers restricted by Access Control Rules.
🎖@cveNotify
Obot 0.21.1 through 0.24.1 contains an authorization bypass vulnerability that allows authenticated users to reach MCP servers because the checkUI deny list omits the /mcp-connect-composite/ route. Basic-role users with a composite MCP ID can proxy requests through mcpGateway.Proxy to invoke tools on MCP servers restricted by Access Control Rules.
🎖@cveNotify
GitHub
UI-fallback deny list covers /mcp-connect/ but not /mcp-connect-composite/, reopening the GHSA-vw82 authorization bypass
## Summary
The fix for GHSA-vw82-7fv8-r6gp added `/mcp-connect/` to the UI-fallback deny list. The composite route is `/mcp-connect-composite/{mcp_id}`, which does not carry that prefix, so `check...
The fix for GHSA-vw82-7fv8-r6gp added `/mcp-connect/` to the UI-fallback deny list. The composite route is `/mcp-connect-composite/{mcp_id}`, which does not carry that prefix, so `check...
🚨 CVE-2026-78242
Insertion of sensitive information into log file vulnerability in Apache APISIX.
This vulnerability can cause the unmasked header value to be written to the log sink under a certain response structure.
This issue affects Apache APISIX: 3.17.0.
Users are recommended to upgrade to version 3.18.0, which fixes the issue.
🎖@cveNotify
Insertion of sensitive information into log file vulnerability in Apache APISIX.
This vulnerability can cause the unmasked header value to be written to the log sink under a certain response structure.
This issue affects Apache APISIX: 3.17.0.
Users are recommended to upgrade to version 3.18.0, which fixes the issue.
🎖@cveNotify