Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-4chn-jutc-fue2
Vulnerability ID VCID-4chn-jutc-fue2
Aliases CVE-2026-29784
GHSA-9m84-wc28-w895
Summary Ghost is a Node.js content management system. From version 5.101.6 to 6.19.2, incomplete CSRF protections around /session/verify made it possible to use OTCs in login sessions different from the requesting session. In some scenarios this might have made it easier for phishers to take over a Ghost site. This issue has been patched in version 6.19.3.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-352 Cross-Site Request Forgery (CSRF)
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00025 https://api.first.org/data/v1/epss?cve=CVE-2026-29784
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-9m84-wc28-w895
cvssv3.1 7.5 https://github.com/TryGhost/Ghost
generic_textual HIGH https://github.com/TryGhost/Ghost
cvssv3.1 7.5 https://github.com/TryGhost/Ghost/commit/ec065a774fa125953d2aa644a59cd8990329e0a0
generic_textual HIGH https://github.com/TryGhost/Ghost/commit/ec065a774fa125953d2aa644a59cd8990329e0a0
ssvc Track https://github.com/TryGhost/Ghost/commit/ec065a774fa125953d2aa644a59cd8990329e0a0
cvssv3.1 7.5 https://github.com/TryGhost/Ghost/security/advisories/GHSA-9m84-wc28-w895
cvssv3.1_qr HIGH https://github.com/TryGhost/Ghost/security/advisories/GHSA-9m84-wc28-w895
generic_textual HIGH https://github.com/TryGhost/Ghost/security/advisories/GHSA-9m84-wc28-w895
ssvc Track https://github.com/TryGhost/Ghost/security/advisories/GHSA-9m84-wc28-w895
cvssv3.1 7.5 https://nvd.nist.gov/vuln/detail/CVE-2026-29784
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2026-29784
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2026-29784
CVE-2026-29784 https://nvd.nist.gov/vuln/detail/CVE-2026-29784
ec065a774fa125953d2aa644a59cd8990329e0a0 https://github.com/TryGhost/Ghost/commit/ec065a774fa125953d2aa644a59cd8990329e0a0
GHSA-9m84-wc28-w895 https://github.com/advisories/GHSA-9m84-wc28-w895
GHSA-9m84-wc28-w895 https://github.com/TryGhost/Ghost/security/advisories/GHSA-9m84-wc28-w895
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://github.com/TryGhost/Ghost
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://github.com/TryGhost/Ghost/commit/ec065a774fa125953d2aa644a59cd8990329e0a0
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-09T17:39:47Z/ Found at https://github.com/TryGhost/Ghost/commit/ec065a774fa125953d2aa644a59cd8990329e0a0
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://github.com/TryGhost/Ghost/security/advisories/GHSA-9m84-wc28-w895
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-09T17:39:47Z/ Found at https://github.com/TryGhost/Ghost/security/advisories/GHSA-9m84-wc28-w895
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2026-29784
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.0756
EPSS Score 0.00025
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T16:46:52.190232+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2026/29xxx/CVE-2026-29784.json 38.6.0