A vulnerability has been found in TryGhost Ghost up to 6.19.0 and classified as critical. Impacted is an unknown function. This manipulation causes sql injection.
This vulnerability is tracked as CVE-2026-26980. The attack is possible to be carried out remotely. No exploit exists.
The affected component should be upgraded.
