CVE-2026-103276 — Ghost before 6.20.0 File Read via URL Encoding Bypass
Ghost versions before 6.20.0 contain a file extension filtering bypass vulnerability that allows unauthenticated attackers to read theme templates and metadata. Attackers can us…
Published: 2026-10-01 · CVSS: 6.9 · CVSS 4.0
Ghost versions before 6.20.0 contain a file extension filtering bypass vulnerability that allows unauthenticated attackers to read theme templates and metadata. Attackers can use URL encoding to bypass extension validation and access sensitive theme files.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7