GhostManager

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

GhostManager records in CISA KEV

No GhostManager vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-54390 CVE-2026-78204 · GHSA-62c9-3hw5-37qf

Ghostwriter through 7.2.6 Missing Authorization on Report Template Lint Endpoints

MEDIUM 57

Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00273 Published 2026-08-24 No fix listed CWE-862

TI-2026-54389 CVE-2026-78203 · GHSA-r3hm-6h2p-vf9v

Ghostwriter before 7.1.2 Cross-Client Report Template Disclosure via Unauthorized Template Swap

LOW 31

Ghostwriter before 7.1.2 fails to validate template ownership in the report template swap endpoint, allowing attackers to attach client-scoped templates from other clients to their own reports.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00369 Published 2026-08-24 Fixed in 7.1.2 CWE-639

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0