PT-2026-67873 · Ghost · Ghost

CVE-2026-70589

·

Published

2026-08-04

·

Updated

2026-08-17

CVSS v3.1

4.8

Medium

VectorAV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Ghost versions 4.22.0 through 6.54.0
Description Ghost is a Node.js content management system. A missing validation check allows users to redeem subscription offers that are no longer active.
Recommendations Update to version 6.54.1.

Exploit

Fix

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-20

Related Identifiers

BIT-GHOST-2026-70589
CVE-2026-70589
GHSA-4WX2-7GVJ-QFQ3

Affected Products

Ghost