Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:33:52 +0000 fkie_cve-2026-103275 https://vulnerability.circl.lu/vuln/fkie_cve-2026-103275 <p>Ghost 5.42.2 before 6.58.0 contains an information disclosure vulnerability in the Admin API bulk post and page edit and delete endpoints, which accept filters on restricted fields such as authors.password, because of an incomplete fix for CVE-2026-70590. Staff-level attackers can infer other staff users&#39; password hashes from which filters match and perform offline password-guessing attacks against them.</p> <p>Ghost 5.42.2 before 6.58.0 contains an information disclosure vulnerability in the Admin API bulk post and page edit and delete endpoints, which accept filters on restricted fields such as authors.password, because of an incomplete fix for CVE-2026-70590. Staff-level attackers can infer other staff users&#39; password hashes from which filters match and perform offline password-guessing attacks against them.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-103275 GHSA-xqw5-w9qm-w396 https://vulnerability.circl.lu/vuln/ghsa-xqw5-w9qm-w396 <p>Ghost 5.42.2 before 6.58.0 contains an information disclosure vulnerability in the Admin API bulk post and page edit and delete endpoints, which accept filters on restricted fields such as authors.password, because of an incomplete fix for CVE-2026-70590. Staff-level attackers can infer other staff users&#39; password hashes from which filters match and perform offline password-guessing attacks against them.</p> <p>Ghost 5.42.2 before 6.58.0 contains an information disclosure vulnerability in the Admin API bulk post and page edit and delete endpoints, which accept filters on restricted fields such as authors.password, because of an incomplete fix for CVE-2026-70590. Staff-level attackers can infer other staff users&#39; password hashes from which filters match and perform offline password-guessing attacks against them.</p> https://vulnerability.circl.lu/vuln/ghsa-xqw5-w9qm-w396