CVE-2026-105683
âšī¸ lowSummary
Ghost is a Node.js content management system. From 6.14.0 until 6.27.0, an input validation issue may have allowed staff users to access local files outside the intended data storage directories on the server. This issue is fixed in version 6.27.0.
CVSS Score
3.8
Low
EPSS Score
0.3
Exploit Probability
Published Date
2026-10-05
First Seen: 2026-10-08
đ Relative Risk Intelligence
This CVE is Lower Risk - more severe than 4.4% of all 365,616 vulnerabilities in our database.
#349,635
Below average severity
Severity Percentile
Last Modified
2026-10-06
Source
NVD đ
CVSS Vector 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:L
CWE IDs (Weakness Types)