CVE-2026-103267

4.3 MEDIUMpublic exploit available

Published 2026-10-01 · Updated 2026-10-01

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Ghost versions before 6.62.0 contain an authentication bypass vulnerability in staff invite acceptance that allows users to specify any email address when creating their account. Attackers can accept leaked invite tokens with attacker-controlled email addresses, or legitimate recipients can register with unintended email providers.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weaknesses

CWE-807

Public exploit & PoC references

https://github.com/TryGhost/Ghost/security/advisories/GHSA-xcgh-2828-cvmx

All references

https://github.com/TryGhost/Ghost/security/advisories/GHSA-xcgh-2828-cvmx
https://www.vulncheck.com/advisories/ghost-0.5.0-before-6.62.0-arbitrary-email-registration-via-staff-invite

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

LOWCVE-2026-101079PoC
LOWCVE-2026-101131
HIGHCVE-2026-102117PoC
HIGHCVE-2026-102234
UNSCOREDCVE-2026-103923PoC
HIGHCVE-2026-104658
MEDIUMCVE-2026-105458
HIGHCVE-2026-108433

Related by shared AI tags and CWE weakness class. Browse the full archive.