CVE-2026-26980

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

May 24, 2026

Last Seen

October 21, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Ghost CMS SQL Injection Exploits 700+ Sites in Ongoing ClickFix Campaign78.0

A critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS is being actively exploited in a large-scale cyberattack affecting over 700 websites, including those of Harvard University, Oxford University, Auburn University, and DuckDuckGo. The vulnerability allows unauthenticated attackers t...

Critical SQL Injection Vulnerability in Ghost CMS Exploited72.0

CVE-2026-26980 is a SQL Injection vulnerability affecting Ghost, a Node.js content management system, allowing unauthenticated attackers to perform arbitrary database reads. The flaw exists in the Content API's slug filter ordering functionality, impacting versions 3.24.0 through 6.19.0. Attackers c...

NightSpire Ransomware Exploits RDP for Widespread Attacks66.5

NightSpire ransomware, identified in early 2025, has rapidly become a significant threat, employing double-extortion tactics. It targets various sectors, including hospitals and government offices, by exploiting Remote Desktop Protocol (RDP) vulnerabilities and remote admin tools. Victims face data...

Anthropic Launches Cyber Mission to Secure Critical Infrastructure and Open Source Software42.9

On October 8, 2026, Anthropic announced the launch of its Cyber Mission, aimed at enhancing the security of critical infrastructure and open-source software. The initiative includes the Critical Infrastructure Defense Program (CIDP) and OSS Scanner, a free service for periodic vulnerability scans of...