Ghost Vulnerabilities

Comprehensive security vulnerability database for Ghost products

Last updated: Mar 7, 2026
Total CVEs

1

Critical

0

With Exploits

1

Last 30 Days

0

Severity Distribution

Critical0
0%
High1
100%
Medium0
0%
Low0
0%
DescriptionVendor / ProductExploit Status
CVE-2026-297848.8

This vulnerability allows an attacker to potentially take over a Ghost site by exploiting weak protections during the login process, making it easier for them to use stolen session tokens. It primarily affects versions 5.101.6 to 6.19.2, and users should upgrade to version 6.19.3 or later to fix the issue.

ghostghost
Exploit Available
about 1 month agoMar 7, 2026

About Ghost Security

This page tracks all publicly disclosed security vulnerabilities (CVEs) affecting Ghost products. Our database is updated in real-time from the National Vulnerability Database (NVD) and enriched with exploit information from GitHub and other security research sources.

Each CVE listing includes CVSS severity scores, exploit availability status, AI-powered vulnerability summaries, and links to official patches and security advisories.