BIT-ghost-2026-103276

vendorUSosv

Ghost before 6.20.0 File Read via URL Encoding Bypass

view advisory published 2026-10-09Licence: per source

Ghost versions before 6.20.0 contain a file extension filtering bypass vulnerability that allows unauthenticated attackers to read theme templates and metadata. Attackers can use URL encoding to bypass extension validation and access sensitive theme files.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-103276US	medium5.3	0.23% (13th)	—	2026-10-01
Ghost versions before 6.20.0 contain a file extension filtering bypass vulnerability that allows unauthenticated attackers to read theme templates and metadata. Attackers can use U…

references

External citations — patches, advisories, analysis.

https://github.com/TryGhost/Ghost/security/advisories/GHSA-6v8p-3jx9-8chrWEB
https://nvd.nist.gov/vuln/detail/CVE-2026-103276WEB
https://www.vulncheck.com/advisories/ghost-before-6.20.0-file-read-via-url-encoding-bypassWEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan