Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: TryGhost Ghost 6.44.1 Clear all filters
TI-2026-65664 CVE-2026-103289 · GHSA-83rv-pxjq-8h5x

Ghost 5.9.0 before 6.44.1 Authorization Bypass via Comments

Priority LOW 31

Ghost from 5.9.0 before 6.44.1 contains an input validation issue in the comments feature that allows authenticated members to access comments they are not authorized to view, resulting in disclosure of restricted commen…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00231 Published 2026-10-01 Fixed in 6.44.1 CWE-943
TI-2026-65663 CVE-2026-103288 · GHSA-qrh6-cwg3-343x · GHSA-wj4w-mc24-pcfm

Ghost 5.9.0 before 6.44.1 Authorization Bypass via Comment Like

Priority LOW 31

Ghost, an open-source publishing platform, contains an input validation flaw in its comment like feature in versions from 5.9.0 before 6.44.1.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00203 Published 2026-10-01 Fixed in 6.44.1 CWE-639