Ghost_CMS 6.19.0 - Remote Code Execution
Source Exploit-DB RSS Feed
Not known to be exploited · public exploit available (Metasploit, Exploit-DB) · CVSS 7.7 High.
Data as of 10/25/2026, 04:40:12 UTC
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 5.0% chance of exploitation in 30 days – higher than 92% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Public exploits
- 1 Metasploit module, 1 Exploit-DB entryPublic attack or detection tooling exists; see Public exploits below.
What to do
AI-suggested
Until an official fix is available, consider restricting access to the Ghost_CMS service, applying network-level protections, or isolating affected systems to reduce exposure.
Public exploits and detection
Metasploit modules
Public tooling indexed from Metasploit Framework, Exploit-DB and ProjectDiscovery nuclei-templates. Its existence raises the odds of exploitation; it does not confirm attacks.
Description
Ghost_CMS versions from 0.7.2 up to and including 6.19.0 are affected by a remote code execution vulnerability identified as CVE-2026-29053. This vulnerability allows an attacker to execute arbitrary code remotely on affected systems. The issue is classified as critical severity. No patch or remediation information is provided in the available data. Exploit code is publicly known and categorized as an exploit. The affected platforms include Ubuntu 18.0.4 and Windows 10.
Impact
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely on the affected Ghost_CMS installations, leading to full system compromise or unauthorized control over the CMS environment. This poses a critical risk to confidentiality, integrity, and availability of the affected systems.
Indicators of compromise
Exploit source code
# Exploit Title: Ghost_CMS 6.19.0 - Remote Code Execution
# Date: 08/07/2026
# Exploit Author: Maksim Rogov
# Vendor Homepage: https://ghost.org/
# Software Link: https://ghost.org/
# Version: >= 0.7.2, <= 6.19.0
# Tested on: Ubuntu 18.0.4 | Windows 10
# CVE : CVE-2026-29053
##
# This module requires Metasploit: https://metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##
require 'zip'
class MetasploitModule < Msf::Exploit::Remote
Rank = ExcellentRank…