CVE-2026-103281 | TryGhost up to 6.22.x Admin API privileges management

October 1, 2026 Yanac

A vulnerability, which was classified as critical, has been found in TryGhost Ghost up to 6.22.x. This affects an unknown part of the component Admin API. Performing a manipulation results in improper privilege management.

This vulnerability was named CVE-2026-103281. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More