← Database

CVE-2026-26980

CRITICAL CVSS: 9.4 Published: 2026-02-20 Modified: 2026-06-17

Description

Ghost is a Node.js content management system. Versions 3.24.0 through 6.19.0 allow unauthenticated attackers to perform arbitrary reads from the database. This issue has been fixed in version 6.19.1.

Affected Platforms

Ghost Ghost

Weakness Type

CWE-89

References