CVE-2026-103286
Received Received - Intake

Privilege Escalation in Ghost CMS via Notifications System

Publication date: 2026-10-01

Last updated on: 2026-10-01

Assigner: VulnCheck

Description
Ghost versions from 2.21.0 before 6.56.0 contain a privilege escalation vulnerability in the notifications system that allows low-privilege staff users to escalate to higher-privilege staff roles. Attackers with low-privilege staff access can exploit the notifications system to gain elevated privileges without proper authorization checks.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-01
Last Modified
2026-10-01
Generated
2026-10-01
AI Q&A
2026-10-01
EPSS Evaluated
N/A
NVD
CVE-2026-103286
EUVD
EUVD-2026-90679

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
ghost ghost to 6.56.0 (exc)
tryghost ghost From 2.21.0 (inc) to 6.56.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-266 A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a privilege escalation flaw in Ghost versions from 2.21.0 before 6.56.0. It allows low-privilege staff users to exploit the notifications system to gain elevated privileges without proper authorization checks.

Detection Guidance

To detect this vulnerability, check the installed Ghost version on your system. Compare it against the affected range (2.21.0 to 6.56.0). Use commands like 'ghost version' for Ghost-CLI or inspect Docker images for self-hosted instances.

Impact Analysis

An attacker with low-privilege staff access could escalate their permissions to higher roles, potentially gaining unauthorized access to sensitive data or administrative functions. This could lead to data breaches or system compromise.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating compliance requirements such as GDPR or HIPAA. Organizations may face legal penalties or reputational damage if exploited.

Mitigation Strategies

Immediately upgrade Ghost to version 6.56.0 or later. For Docker users, pull the latest official image. Ghost-CLI users should follow the official update documentation to patch the privilege escalation flaw.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-103286. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart