Threat database

Two zero-day vulnerabilities in the open-source Zammad ticketing system were exploited in an AI-powered attack against the Dutch Institute for Vulnerability Disclosure (DIVD). The flaws allowed attackers to hijack sessions, execute remote code, and escalate privileges to root. The attack led to data exfiltration within DIVD's environment, though network segmentation limited further compromise. Affected versions include Zammad 6.3.0 to 6.5.4, with later versions 7.0.0 to 7.1.3 containing the defect but not exploitable due to environment conditions. DIVD recommends upgrading to Zammad version 7 or taking the system offline. A verification script for detecting compromise is available.

Obot 0.21.1 through 0.24.1 contains an authorization bypass vulnerability that allows authenticated users to reach MCP servers because the checkUI deny list omits the /mcp-connect-composite/ route. Basic-role users with a composite MCP ID can proxy requests through mcpGateway.Proxy to invoke tools on MCP servers restricted by Access Control Rules.

Ghost versions from 0.5.3 through versions prior to 6.50.0 fail to sanitize the data placed in the JSON-LD HTML tag emitted by the {{ghost_head}} helper. An authenticated user with limited privileges can inject unescaped content that is rendered as script in the published page, potentially leading to compromise of a staff user's admin session when that user views the affected page.

Ghost versions from 3.20.2 up to but not including 6.51.0 have a server-side request forgery (SSRF) vulnerability in the image dimension refetching feature. This flaw allows authenticated staff users to make the server send HTTP requests to arbitrary URLs, potentially accessing internal network resources or metadata services not exposed publicly.

Ghost versions 6.14.0 through versions prior to 6.27.0 contain a path traversal vulnerability in the ImageSize service. Insufficient input validation of user-supplied file paths may allow authenticated staff users to access local files outside the intended data storage directories on the server.

Ghost from 5.9.0 before 6.44.1 contains an input validation issue in the comments feature that allows authenticated members to access comments they are not authorized to view, resulting in disclosure of restricted comment data.

Ghost, an open-source publishing platform, contains an input validation flaw in its comment like feature in versions from 5.9.0 before 6.44.1. An authenticated member can delete comment likes or dislikes belonging to other users that they are not authorized to delete, resulting in an authorization bypass and unauthorized modification of comment engagement data.

Ghost versions 1.18.0 up to but not including 6.27.0 have a server-side request forgery (SSRF) vulnerability in the webhooks feature. This flaw allows attackers with staff privileges to make the Ghost server send crafted requests to internal network hosts, potentially probing internal resources. The vulnerability requires staff-level access to exploit and does not involve user interaction.

Ghost versions from 2.21.0 before 6.56.0 contain a privilege escalation vulnerability in the notifications system that allows low-privilege staff users to escalate to higher-privilege staff roles. Attackers with low-privilege staff access can exploit the notifications system to gain elevated privileges without proper authorization checks.

Ghost versions from 5.19.0 before 6.57.1 contain a cross-site request forgery vulnerability in the post feedback functionality that allows attackers to submit feedback on behalf of logged-in users. Attackers can craft a malicious link to the feedback page that automatically submits feedback when visited by authenticated members without their knowledge or consent.

Ghost versions from 5.125.1 before 6.57.1 contain an information disclosure vulnerability in the Admin Feedback endpoint that allows unauthorized staff users to access member data. Attackers with staff privileges can query the feedback endpoint to retrieve sensitive member information without proper authorization checks.

Ghost versions 6.20.0 through 6.57.0 have a session handling vulnerability that allows authenticated staff users to impersonate other staff users by bypassing two-factor authentication. This flaw enables attackers with valid staff credentials to gain unauthorized administrative access.

Ghost versions 0.5.0 before 6.23.0 contain a concurrency issue in the staff invitation acceptance mechanism that allows multiple accounts to be created from a single invite token. Attackers can exploit this race condition by submitting concurrent requests with the same invitation token to create duplicate user accounts.

Ghost (npm package 'ghost') versions from 3.23.0 up to, but not including, 6.23.0 expose API keys to users with low-privilege staff accounts. An authenticated low-privilege staff user can read API keys returned by the Admin API, which are intended to be available only to higher-privileged users.

Ghost from version 0.8.0 before 6.23.0 contains an information disclosure vulnerability in its setup endpoint: the endpoint responds to unauthenticated requests with the site owner's email address, allowing any remote visitor to obtain it.

Ghost versions from 3.10.0 up to but not including 6.34.0 have a vulnerability where sessions are not fully invalidated after a user changes their password. This allows an attacker with a stolen session cookie to maintain access to the user account despite the password change. The vulnerability has a high severity score of 7.6.

Ghost versions 5.8.0 before 6.34.0 contain an input validation vulnerability in the admin iframe that allows attackers to take over staff user accounts. Attackers with content publishing privileges can craft malicious pages that, when visited by active staff users, enable account takeover through improper input validation.

Ghost versions from 2.5.0 before 6.34.0 contain an untrusted script execution vulnerability in the oEmbed preview feature that fails to sandbox externally hosted scripts. Attackers can craft malicious oEmbed content to execute scripts in the context of a staff user's admin session, potentially compromising administrative access.

Ghost versions before 6.20.0 contain a file extension filtering bypass vulnerability that allows unauthenticated attackers to read theme templates and metadata. Attackers can use URL encoding to bypass extension validation and access sensitive theme files.

Ghost versions from 5.42.2 up to but not including 6.58.0 have an information disclosure vulnerability in the Admin API's bulk post and page edit and delete endpoints. These endpoints improperly allow filtering on restricted fields such as authors.password due to an incomplete fix for a previous vulnerability (CVE-2026-70590). This flaw enables staff-level attackers to infer password hashes of other staff users, which can then be subjected to offline password-guessing attacks.