high7.2
CVE-2026-104418
Ghost from 6.10.3 before 6.64.0 contains a remote code execution vulnerability that allows authenticated administrators to run code by abusing theme translatio…
Impact
Ghost from 6.10.3 before 6.64.0 contains a remote code execution vulnerability that allows authenticated administrators to run code by abusing theme translation file loading. Attackers with administrator access can upload a crafted theme containing malicious translation files to execute arbitrary code on the Ghost server.
Affected products
| Product | Affected versions |
|---|---|
| Ghost From 6.10.3 | before 6.64.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.