Vendor
TryGhost
- CVEs tracked · all time
- 2
- in CISA KEV · all time
- 0
- article · since 11 Sep
- 1
- articles · all time
- 8
One article in the last 45 daysThe latest: The Hacker News, Wed 7 Oct, 09:37 UTC.See the full timeline
Products: Ghost
CVEs
2 CVEsCVE-2026-53943Ghost: Cache-poisoning XSS in Ghost frontend via x-ghost-preview headerCVSS9.6Critical–Not in KEV0.5%EPSS1article
- Anthropic expands Claude access for vetted cybersecurity researchersThe Hacker News
- Critical Ghost Cache Flaw Exposes Staff Accounts and Patch Now AvailableSecurityOnline
- Ghost CMS mass hack via CVE-2026-26980 fuels ClickFix attack waveSecurity Affairs
- Global Ghost CMS Poisoning Campaign Exploits Enterprise BlogsSecurityOnline
- Hackers Hijack 700+ Sites via Ghost CMS SQLi Flaw CVE-2026-26980Malwarebytes
- Ghost CMS SQL flaw lets attackers hijack 700+ sites, steal keysSecurity Affairs
- Ghost CMS CVE-2026-26980 SQLi Triggers Attack on 700 SitesSecurityWeek
- CVE-2026-26980 flaw hijacks 700+ Ghost sites for click fraudThe Hacker News · first in our coverage