Storia in 3 fonti

Ghost CMS Vulnerability Exploited to Hack Over 700 Websites

CVE-2026-26980, a vulnerability patched a few months ago in the Ghost CMS, has been exploited to hack hundreds of websites

Raccontata da

bleepingcomputer.com

thehackernews.com

securityweek.com

Confronto fonti

3 prospettive sulla stessa storia

AI · summaries

securityweek.comStai leggendo3 mesi fa

Ghost CMS Vulnerability Exploited to Hack Over 700 Websites

CVE-2026-26980, a vulnerability patched a few months ago in the Ghost CMS, has been exploited to hack hundreds of websites

originale

thehackernews.com3 mesi fa

Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks

CVE-2026-26980 (CVSS 9.4) in Ghost CMS enables unauthenticated admin API takeover; 700+ sites—SaaS, fintech, AI—poisoned with ClickFix loaders since May 7. Upgrade to Ghost 6.19.1 now and rotate all credentials; unpatched instances deliver RAT malware to site visitors.

Leggi questa versione → originale

Timeline cronologica

domenica 24 maggio 2026·bleepingcomputer.com
Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign
A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious JavaScript code that triggers ClickFix attack flows.
lunedì 25 maggio 2026·thehackernews.com
Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks
Ghost CMS flaw CVE-2026-26980 enabled attacks on 700+ sites, injecting ClickFix malware through fake CAPTCHA pages.

Ghost CMS Vulnerability Exploited to Hack Over 700 Websites

Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks

Timeline cronologica

Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign

Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks

Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign

Ghost CMS Vulnerability Exploited to Hack Over 700 Websites