Description
Ghost CMS < 6.19.1 存在sql注入漏洞，攻击者可利用此漏洞数据库敏感信息。
Ghost CMS < 5.42.1存在sql注入漏洞（CVE-2026-26980）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2026-26980
https://github.com/TryGhost/Ghost/security/advisories/GHSA-w52v-v783-gw97
https://www.sentinelone.com/vulnerability-database/cve-2026-26980/
https://www.sonicwall.com/blog/ghost-cms-content-api-blind-sql-injection
https://www.endorlabs.com/vulnerability/cve-2026-26980