CVE-2026-26980 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Ghost is a Node.js content management system. Versions 3.24.0 through 6.19.0 allow unauthenticated attackers to perform arbitrary reads from the database. This…
Critical CVSS: 9.4

CVE-2026-26980

Ghost is a Node.js content management system. Versions 3.24.0 through 6.19.0 allow unauthenticated attackers to perform arbitrary reads from the database. This issue has been fixed in version 6.19.1.
Vendor
Ghost
Product
Ghost
CWE
CWE-89
Yayın Tarihi
2026-02-20 02:16:54
Güncelleme
2026-02-20 19:22:53
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-89 Ghost CRITICAL Ghost 2026

Referanslar

https://github.com/TryGhost/Ghost/commit/30868d632b2252b638bc8a4c8ebf73964592ed91 https://github.com/TryGhost/Ghost/releases/tag/v6.19.1 https://github.com/TryGhost/Ghost/security/advisories/GHSA-w52v-v783-gw97