CVE-2026-63115 | TryGhost ActivityPub up to 1.2.5 Undo privileges management

A vulnerability, which was classified as problematic, has been found in TryGhost ActivityPub up to 1.2.5. Impacted is the function Undo of the component Undo Handler. Performing a manipulation results in improper privilege management.

This vulnerability was named CVE-2026-63115. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More