VDB
CVE-2026-26980
CVE-2026-26980
PUBLISHED
KEV
CVSS 7.5 HIGH
Ghost has a SQL Injection in its Content API
EPSS 71.10% · 99.4th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
71.10%
99.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | ghost | 3.24.0 |
| Bitnami | ghost | 3.24.0, 3.24.0 |
Timeline
- May 14, 2022 CrowdSec Sighting
- Oct 20, 2022 CrowdSec Sighting
- Oct 28, 2022 CrowdSec Sighting
- Nov 21, 2022 CrowdSec Sighting
- Nov 30, 2022 CrowdSec Sighting
- Dec 29, 2023 CrowdSec Sighting
- Jan 8, 2026 CrowdSec Sighting
- Feb 18, 2026 CVE Published
- Feb 20, 2026 EPSS Score
- Feb 20, 2026 PoC Published
- Feb 20, 2026 PoC Published
- Feb 20, 2026 PoC Published