{"vulnerability": "CVE-2026-10564", "sightings": [{"uuid": "00c2b2af-cf72-4f6b-b21d-8d4217d7a0c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10564", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr245a72ph2y", "content": "\ud83d\udccc CVE-2026-10564 - IBM Langflow OSS 1.0.0 through 1.9.6 contains a Server-Side Request Forgery (SSRF). The legacy RSSReaderComponent in rss.py and SearXNG component in s... https://www.cyberhub.blog/cves/CVE-2026-10564", "creation_timestamp": "2026-07-20T01:07:25.243596Z"}, {"uuid": "13ee63f5-5fdd-4021-b8fe-1f493718e1bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105640", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mx5ow3633z2t", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-105640: Plane is an open-source project management tool\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-105640\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-10-05T19:52:17.195449Z"}, {"uuid": "88adccac-4ba7-4fa6-bc4b-23c3bf14ac88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105644", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bposd33sy3n6u", "content": "CVE-2026-105644 - Ghost: Stored XSS via SVG Files in Content Imports\nCVE ID : CVE-2026-105644\n \n Published : Oct. 5, 2026, 6:53 p.m. | 17\u00a0minutes ago\n \n Description : Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, SVG images included in content imports ...", "creation_timestamp": "2026-10-05T19:52:55.203512Z"}, {"uuid": "2189241d-242a-49fa-9055-73f57e46b571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105640", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx5pickjr62k", "content": "\ud83d\udd34 CVE-2026-105640 - Critical (9.1)\n\nPlane is an open-source project management tool. Prior to 1.4.0, Plane trusts email addresses ret...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105640/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-05T20:02:30.272624Z"}, {"uuid": "59e53900-1f23-4f9f-a77f-a4c48dff5545", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105645", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/biafwopnrt7dv", "content": "CVE-2026-105645 - Ghost: Regular Expression Denial of Service in External Media Inliner\nCVE ID : CVE-2026-105645\n \n Published : Oct. 5, 2026, 6:56 p.m. | 14\u00a0minutes ago\n \n Description : Ghost is a Node.js content management system. From 5.37.0 until 6.67.0, a crafted request t...", "creation_timestamp": "2026-10-05T20:04:55.007641Z"}, {"uuid": "1a12e4b4-c181-4d15-b839-b1f19b1727b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105640", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx5psa7cib2w", "content": "\ud83d\udea8 CVE-2026-105640 \u2014 CVSS 9.1 CRITICAL\n\nPlane is an open-source project management tool. Prior to 1.4.0, Plane trusts email addresses returned by G...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105640\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-05T20:08:01.905193Z"}, {"uuid": "fbf418c5-dab1-4cd1-94b4-a4db3ceaca00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105641", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx5psieq3w2l", "content": "\ud83d\udea8 CVE-2026-105641 \u2014 CVSS 9.8 CRITICAL\n\nPlane is an open-source project management tool. Prior to 1.4.0, the deployments/aio/community/ and deploym...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105641\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-05T20:08:10.384669Z"}, {"uuid": "1fad7c40-f43f-4bc2-a5ec-4298e0794401", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105646", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4m4dbz4t56mb7", "content": "CVE-2026-105646 - Ghost: Regular Expression Denial of Service in Content Import\nCVE ID : CVE-2026-105646\n \n Published : Oct. 5, 2026, 6:58 p.m. | 12\u00a0minutes ago\n \n Description : Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, a crafted content import fil...", "creation_timestamp": "2026-10-05T20:10:55.077296Z"}, {"uuid": "4823d09d-6a28-4899-a8ea-4f04626f39a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105641", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx5qdb3h7s2r", "content": "\ud83d\udd34 CVE-2026-105641 - Critical (9.8)\n\nPlane is an open-source project management tool. Prior to 1.4.0, the deployments/aio/community/ a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105641/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-05T20:17:35.051195Z"}, {"uuid": "ff5a022f-fb4b-4c88-b778-e9e78d7a4d8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105642", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx5qdidnw72k", "content": "\ud83d\udfe0 CVE-2026-105642 - High (8.8)\n\nGhost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing libra...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105642/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-05T20:17:41.803422Z"}, {"uuid": "b0430a92-593c-4aee-ac44-4030c7fa8b5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105640", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcfo3d4pb2x", "content": "CVE-2026-105640 - plane\nThe Plane project\u2011management app (versions before 1.4.0) accepts email addresses from Gitea or self\u2011hosted GitLab OAuth logins without checking if the provider has verified them. An\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#plane #makeplane #CVE #infosec", "creation_timestamp": "2026-10-07T16:50:04.384588Z"}, {"uuid": "ae48718a-073e-4cb4-ba91-a784024d4fde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105641", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcfo4onbr2x", "content": "CVE-2026-105641 - plane\nThe open\u2011source Plane tool (versions before 1.4.0) includes deployment files that contain fixed secret keys. If these defaults are not changed, anyone who knows the keys can create\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#plane #makeplane #CVE #infosec", "creation_timestamp": "2026-10-07T16:50:05.155479Z"}, {"uuid": "f5459ec2-dde4-419d-a072-00030336bb12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105642", "type": "seen", "source": "https://bsky.app/profile/standup.thecompound.tech/post/3mxcvg7rtoy2q", "content": "Ghost 6.56.0-6.65.0 lets any staff user run commands through a bookmark card image. CVE-2026-105642 is fixed in Ghost 6.67.0; Contributors are included in the affected scope. #software", "creation_timestamp": "2026-10-07T21:32:01.220823Z"}, {"uuid": "ce9f7edc-d7c9-4805-8cb9-b0f44d50953c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105647", "type": "seen", "source": "https://gist.github.com/alon710/e9c5321f79c46f7c54f00ee758f049f3", "content": "# CVE-2026-105647: CVE-2026-105647: Server-Side Request Forgery via Favicon Probing in Ghost CMS\n\n> **CVSS Score:** 4.0\n> **Published:** 2026-10-07\n> **Full Report:** https://cvereports.com/reports/CVE-2026-105647\n\n## Summary\nAn unauthenticated Server-Side Request Forgery (SSRF) vulnerability exists in Ghost CMS from version 6.54.1 to 6.65.0. The vulnerability stems from a validation bypass in the favicon resolution logic within the bookmark-fetching subsystem, which allows remote, unauthenticated attackers to trigger arbitrary HTTP requests to the local host and internal networks. This bypass circumvents the custom DNS-level IP blocklist controls configured globally in the application.\n\n## TL;DR\nGhost CMS versions 6.54.1 through 6.64.0 are vulnerable to unauthenticated blind SSRF due to a validation bypass in the favicon resolution flow. Attackers can leverage this to make HTTP requests targeting private and loopback networks.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918 / CWE-367\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 4.0 (Medium)\n- **Exploit Status**: PoC / Analytical\n- **CISA KEV Status**: Not Listed\n- **Impact**: Low Confidentiality (Blind SSRF)\n\n## Affected Systems\n\n- Ghost Content Management System (CMS)\n- **Ghost**: >= 6.54.1, < 6.65.0 (Fixed in: `6.65.0`)\n\n## Mitigation\n\n- Upgrade Ghost to version 6.65.0 or later to apply the official security patch.\n- Enforce outbound firewall boundaries at the operating system or cloud configuration layer.\n- Proxy outbound application traffic through a dedicated forward proxy with restricted destination ACLs.\n\n**Remediation Steps:**\n1. Step 1: Inspect the running Ghost application version via the admin panel or package manifest.\n2. Step 2: Execute command 'npm install ghost@6.65.0' or use the CLI updater 'ghost update' to upgrade the instance.\n3. Step 3: Establish local host egress rules limiting outbound TCP requests to valid public subnets.\n\n## References\n\n- [GitHub Security Advisory GHSA-322m-ff4g-9vx9](https://github.com/TryGhost/Ghost/security/advisories/GHSA-322m-ff4g-9vx9)\n- [NVD - CVE-2026-105647 Details](https://nvd.nist.gov/vuln/detail/CVE-2026-105647)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-105647) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-08T16:30:28.000000Z"}]}