CVE-2026-103274 — Ghost 5.3.0 before 6.58.0 Unauthenticated Comment Read
Ghost versions 5.3.0 before 6.58.0 fail to properly enforce access controls on comments in private mode. Unauthenticated visitors can read comments that should be restricted, by…
Published: 2026-10-01 · CVSS: 6.9 · CVSS 4.0
Ghost versions 5.3.0 before 6.58.0 fail to properly enforce access controls on comments in private mode. Unauthenticated visitors can read comments that should be restricted, bypassing privacy settings.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7