Tag: CVE-2026-26980

1 Attack Reports | 1 Vulnerabilities

Attack reports

Ghost CMS Mass Compromised via CVE-2026-26980, Now Fueling ClickFix Attacks

Attackers exploited CVE-2026-26980, a critical SQL injection vulnerability in Ghost CMS, to obtain Admin API Keys without authorization and conduct mass website poisoning campaigns. Over 700 domains across multiple industries including universities, blockchain, AI, security research, and media were…
sql injection
clickfix
information stealer
cloaking
CVE-2026-26980
2026-05-21
fakecaptcha
ghost cms
installer.dll
mass compromise
notepadplusplus.dll
utilifysetup.exe
Published: May 21, 2026
Downloadable IOCs: 11
Click here to see more Attack Reports

Vulnerabilities

CVE-2026-26980

9.4
    Ghost
  • Ghost
Published: February 20, 2026
Click here to see more Vulnerabilities