CVE-2026-103269 — Ghost 5.3.0 before 6.62.0 Missing Authorization via Post Excerpts
Ghost versions 5.3.0 before 6.62.0 contain a missing authorization vulnerability that allows an authenticated site member to read the excerpts of posts they do not have access t…
Published: 2026-10-01 · CVSS: 6.9 · CVSS 4.0
Ghost versions 5.3.0 before 6.62.0 contain a missing authorization vulnerability that allows an authenticated site member to read the excerpts of posts they do not have access to (gated content).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7