Ghost CMS CVE-2026-26980 detection

Detects Ghost CMS and confirms CVE-2026-26980 unauthenticated Content API slug filter SQL injection, 3.24.0–6.19.0. Scrapes the public Content API key from HTML, then verifies the EXP710 boolean oracle on /ghost/api/content/tags/. !/usr/bin/env python3 -- coding: utf-8 -- import re from typing...

Ghost CMS CVE-2026-26980 Content API SQLi

Exploits CVE-2026-26980: unauthenticated blind SQL injection in Ghost Content API slug filter ordering 3.24.0–6.19.0, fixed in 6.19.1. Uses the public Content API key and an EXP710 MySQL boolean oracle HTTP 200/500. Supports test, targeted dumps, and Sqli pseudo-shell. !/usr/bin/env python3 --...

Strapi Content API Sanitization Bypass Detection Module Scanner

This Python script assesses exposure to CVE-2026-27886 in Strapi Content API endpoints by performing differential filter validation against where parameters. Detection compares baseline query behavior against controlledfilter predicates to determine whether unsanitized conditions reach backend...

BIT-GHOST-2026-53949 Ghost Content API filter bypass reveals private fields

Ghost is a Node.js content management system. From 5.46.1 until 6.21.2, the validation applied to filters on the public API endpoints could be partially bypassed, making it possible to reveal private fields via a brute force attack. If SQLite was used as the database password hashes were fully...

Exploit for SQL Injection in Ghost

CVE-2026-26980 — Ghost CMS Content API Blind SQL Injection...

CVE-2026-53949

Summary (CVE-2026-53949) Ghost CMS (Node.js). Affected versions: 5.46.1–6.21.2. Description: validation on filters for public API endpoints could be partially bypassed, enabling disclosure of private fields via brute-force. Impact depends on database: with SQLite, password hashes were fully acces...

com.kurento.kmf:kmf-content-api (>=3.0.5, <=4.3.1), com.kurento.kmf:kmf-repository-api (4.3.1) +4 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.5.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.5.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.kurento.kmf:kmf-content-api =3.0.5, =5.0.3, =1.0.3.release,...

com.github.jknack:mwa-mongo (>=0.4.1, <=0.4.2), com.github.jknack:mwa-morphia (>=0.4.1, <=0.4.2) +7 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.3.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.jknack:mwa-mongo =0.4.1, =0.4.1, =4.1.0, =3.0.6,...

com.github.jknack:mwa-mongo (>=0.4.1, <=0.4.2), com.github.jknack:mwa-morphia (>=0.4.1, <=0.4.2) +7 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.3.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.jknack:mwa-mongo =0.4.1, =0.4.1, =4.1.0, =3.0.6,...

ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (>=0.4, <=0.5), com.kurento.kmf:kmf-broker (4.3.0) +13 more potentially affected by CVE-2026-41844 via org.springframework:spring-webmvc (4.0.1.release)

org.springframework:spring-webmvc MAVEN version 4.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay =0.4, =4.1.0, =4.1.0, =4.1.0, =4.1.0,...

com.kurento.kmf:kmf-broker (4.3.0), com.kurento.kmf:kmf-content-api (>=4.1.0, <=4.3.0) +6 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.0.1.release)

org.springframework:spring-websocket MAVEN version 4.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.kurento.kmf:kmf-broker 4.3.0 - com.kurento.kmf:kmf-content-api =4.1.0,...

CVE-2026-27886

Strapi is an open source headless content management system. Strapi versions starting in 4.0.0 and prior to 5.37.0 did not sufficiently sanitize query parameters when filtering content via relational fields. An unauthenticated attacker could use the where query parameter on any publicly-accessibl...

ANT-2026-69D8H6RP · TryGhost/Ghost · SQL Injection

sql-injection critical CVE-2026-26980 GHSA-w52v-v783-gw97 Severity Claude critical · Security research firm - · Maintainer critical REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-69D8H6RP: Critical Vulnerability CVSS 9.1 : SQLi from unauthenticated user; arbitrary DB...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Strapi

CVE-2026-27886 Vulnerability Assessment Tool Safely detect wh...

GHSA-5H62-F8FG-4W7Q Duplicate Advisory: phpMyFAQ: Missing Authorization on Tag Deletion Allows Any Authenticated User to Delete Tags

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7cx3-2qx2-3g6w. This link is maintained to preserve external references. Original Description phpMyFAQ before 4.1.2 contains a missing authorization vulnerability in the DELETE /admin/api/content/tags/tagId...

CVE-2026-22707

Strapi is an open source headless content management system. In Strapi versions prior to 5.33.3, the Upload plugin's Content API endpoints did not enforce the administrator-configured MIME type restrictions plugin.upload.security.allowedTypes and deniedTypes. The same restrictions were correctly...

CVE-2026-22707

Strapi is an open source headless content management system. In Strapi versions prior to 5.33.3, the Upload plugin's Content API endpoints did not enforce the administrator-configured MIME type restrictions "plugin.upload.security.allowedTypes" and "deniedTypes". The same restrictions were...

CVE-2026-22707

In Strapi, prior to 5.33.3, the Upload plugin’s Content API endpoints did not enforce the administrator-configured MIME restrictions, allowing an authenticated Content API user to upload disallowed file types (e.g., HTML, SVG). The Content API handlers bypassed magic-byte MIME checks and allow/de...

EUVD-2026-30361

Strapi is an open source headless content management system. In Strapi versions prior to 5.33.3, the Upload plugin's Content API endpoints did not enforce the administrator-configured MIME type restrictions plugin.upload.security.allowedTypes and deniedTypes. The same restrictions were correctly...

CVE-2026-22707 Strapi Upload Plugin MIME Validation Bypass via Content API

Strapi is an open source headless content management system. In Strapi versions prior to 5.33.3, the Upload plugin's Content API endpoints did not enforce the administrator-configured MIME type restrictions plugin.upload.security.allowedTypes and deniedTypes. The same restrictions were correctly...