Ghost CMS

Ghost Cache Poisoning Flaw Lets Attackers Hijack Staff Accounts Ghost cache poisoning XSS via x-ghost-preview header advisory graphic

Ghost Cache Poisoning Flaw Lets Attackers Hijack Staff Accounts

Do Son July 8, 2026

Ghost released version 6.37.0 to fix a critical cache poisoning bug. The Ghost cache poisoning flaw, tracked...

Global Ghost CMS Poisoning Campaign Exploits Enterprise Blogs

Do Son May 27, 2026

Security researchers have discovered a massive cyber assault infecting hundreds of web servers worldwide. Specifically, a newly...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-53362
In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation...
Admin intel📅 Updated: Jul 14, 2026
CVE-2026-46242CVSS 7.8
In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix ep_remove struct eventpoll / struct file...
Admin intel📅 Updated: Jul 14, 2026
CVE-2026-56155CVSS 7.8
Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate...
CISA KEV📅 Added to KEV: Jul 14, 2026
CVE-2026-56164CVSS 5.3
Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a...
CISA KEV📅 Added to KEV: Jul 14, 2026
CVE-2026-15409CVSS 10.0
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote...
CISA KEV📅 Added to KEV: Jul 14, 2026
CVE-2026-15410CVSS 7.2
Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management...
CISA KEV📅 Added to KEV: Jul 14, 2026
CVE-2008-4128CVSS 4.3
Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871...
CISA KEV📅 Added to KEV: Jul 13, 2026
CVE-2026-1207CVSS 5.4
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. Raster lookups on...
Admin intel📅 Updated: Jul 10, 2026

Critical Alert 4 Active Exploits Detected Today

Ghost Cache Poisoning Flaw Lets Attackers Hijack Staff Accounts

Global Ghost CMS Poisoning Campaign Exploits Enterprise Blogs