Is CVE-2026-103289 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-103289?

CVE-2026-103289 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-103289

Description

Ghost from 5.9.0 before 6.44.1 contains an input validation issue in the comments feature that allows authenticated members to access comments they are not authorized to view, resulting in disclosure of restricted comment data.