CVE-2026-105683 | BDVDB-2026-383003 Detail

Description#

Ghost is a Node.js content management system. From 6.14.0 until 6.27.0, an input validation issue may have allowed staff users to access local files outside the intended data storage directories on the server. This issue is fixed in version 6.27.0.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-10-05Record published in the CVE List.
2. Version 22026-10-08Most recent update recorded in the CVE List.