CVE-2026-103289 | TryGhost up to 6.44.0 Comments Feature improper authorization

October 1, 2026 Yanac

A vulnerability described as problematic has been identified in TryGhost Ghost up to 6.44.0. Affected is an unknown function of the component Comments Feature. The manipulation results in improper authorization.

This vulnerability is known as CVE-2026-103289. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More