cve-2026-26980

Cybersecurity

Ghost CMS SQL injection exploited in widespread ClickFix attacks

May 26, 2026
Ghost CMS logo on a dark background with abstract lines and shapes.

A critical SQL injection vulnerability in Ghost CMS (CVE-2026-26980) is being actively exploited, allowing attackers to inject malicious JavaScript that…

Read More »