https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:23:00.695877+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-22594 CVE-2026-22594 — Ghost has Staff 2FA bypass 2026-10-04T10:23:00.714288+00:00

Affected: TryGhost Ghost

Ghost is a Node.js content management system. In versions 5.105.0 through 5.130.5 and 6.0.0 through 6.10.3, a vulnerability in Ghost's 2FA mechanism allows staff users to skip email 2FA. This issue has been patched in versions 5.130.6 and 6.11.0.