Storia in 4 fonti

Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks

Ghost CMS flaw CVE-2026-26980 enabled attacks on 700+ sites, injecting ClickFix malware through fake CAPTCHA pages.

Raccontata da

Confronto fonti

4 prospettive sulla stessa storia

AI · summaries

thehackernews.comStai leggendo1 mesi fa

Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks

CVE-2026-26980 (CVSS 9.4) in Ghost CMS enables unauthenticated admin API takeover; 700+ sites—SaaS, fintech, AI—poisoned with ClickFix loaders since May 7. Upgrade to Ghost 6.19.1 now and rotate all credentials; unpatched instances deliver RAT malware to site visitors.

originale

bleepingcomputer.com1 mesi fa

Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign

A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious JavaScript code that triggers ClickFix attack flows.

Leggi questa versione → originale

securityweek.com1 mesi fa

Ghost CMS Vulnerability Exploited to Hack Over 700 Websites

CVE-2026-26980, a vulnerability patched a few months ago in the Ghost CMS, has been exploited to hack hundreds of websites

Leggi questa versione → originale

malwarebytes.com1 mesi fa

700+ education and tech websites hijacked in huge ClickFix malware campaign

Hackers are abusing a Ghost CMS website flaw to serve fake Cloudflare verification pages that pressure users into infecting their own PCs.

Leggi questa versione → originale

Timeline cronologica

domenica 24 maggio 2026·bleepingcomputer.com
Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign
A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious JavaScript code that triggers ClickFix attack flows.
lunedì 25 maggio 2026·thehackernews.com
Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks
Ghost CMS flaw CVE-2026-26980 enabled attacks on 700+ sites, injecting ClickFix malware through fake CAPTCHA pages.
lunedì 25 maggio 2026·securityweek.com
Ghost CMS Vulnerability Exploited to Hack Over 700 Websites
CVE-2026-26980, a vulnerability patched a few months ago in the Ghost CMS, has been exploited to hack hundreds of websites
martedì 26 maggio 2026·malwarebytes.com
700+ education and tech websites hijacked in huge ClickFix malware campaign
Hackers are abusing a Ghost CMS website flaw to serve fake Cloudflare verification pages that pressure users into infecting their own PCs.