CVE-2026-29053

creationtimestamp| type| source ---|---|--- 2026-03-05 06:21:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgc5t5stv72h 2026-03-30 08:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mib6yut7xf23 2026-04-22 00:00:04+00:00| published-proof-of-concept|...

ghost-blade (0.1.0), ohm (>=0.1.7, <=0.1.10) +1 more potentially affected by CVE-2026-29053 via ghost (>=0.11.14, <=1.26.2)

ghost NPM version =0.11.14, =0.1.7, =0.1.10 - sign-alex 1.0.1 Source cves: CVE-2026-29053 Source advisory: OSV:GHSA-CGC2-RCRH-QR5X...

Ghost CMS Remote Code Execution

This module exploits a Remote Code Execution RCE vulnerability in Ghost CMS. Specifically crafted malicious themes can execute arbitrary code on the server running Ghost. The affected versions include all releases from 0.7.2 up to and including 6.19.0. For versions 5.105.0-5.130.5 and 6.0.0-6.10....