Medium severity5.3NVD Advisory· Published Oct 1, 2026

CVE-2026-103269

Description

Ghost versions 5.3.0 before 6.62.0 contain a missing authorization vulnerability that allows an authenticated site member to read the excerpts of posts they do not have access to (gated content).

Affected products

Tryghost/Ghostllm-fuzzy
Range: <6.62.0

Patches

Vulnerability mechanics

References

github.com/TryGhost/Ghost/security/advisories/GHSA-rv92-9vfp-2826nvd
www.vulncheck.com/advisories/ghost-5.3.0-before-6.62.0-missing-authorization-via-post-excerptsnvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000