CVE-2026-103289 — Ghost 5.9.0 before 6.44.1 Authorization Bypass via Comments
Ghost from 5.9.0 before 6.44.1 contains an input validation issue in the comments feature that allows authenticated members to access comments they are not authorized to view, r…
Published: 2026-10-01 · CVSS: 7.1 · CVSS 4.0
Ghost from 5.9.0 before 6.44.1 contains an input validation issue in the comments feature that allows authenticated members to access comments they are not authorized to view, resulting in disclosure of restricted comment data.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7