CVE-2026-103287 | TryGhost up to 6.26.x Webhooks server-side request forgery

A vulnerability was found in TryGhost Ghost up to 6.26.x. It has been declared as problematic. The impacted element is an unknown function of the component Webhooks. Such manipulation leads to server-side request forgery.

This vulnerability is listed as CVE-2026-103287. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More