GITHUBEXPLOIT 9.8 CRITICAL

Exploit for SQL Injection in Ghost_D96B5C35-111D-54D3-90D2-4C8CC4B42AA5

9.8 / 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

CVE-2026-26980 — Ghost CMS Content API SQL Injection Lab Unauthenticated blind SQL injection in Ghost CMS via the Content API's slug filter ordering mechanism, allowing arbitrary database reads from any Ghost instance without credentials. | | |...
Visit Original Source

Basic Information

ID D96B5C35-111D-54D3-90D2-4C8CC4B42AA5
Published Apr 17, 2026 at 19:15

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.