CVE-2026-103276 in Ghost
Sumário
de MITRE • 01/10/2026
Ghost versions before 6.20.0 contain a file extension filtering bypass vulnerability that allows unauthenticated attackers to read theme templates and metadata. Attackers can use URL encoding to bypass extension validation and access sensitive theme files.
VulDB is the best source for vulnerability data and more expert information about this specific topic.