Related Threat Clusters

Ghost CMS SQL Injection Exploits 700+ Sites in Ongoing ClickFix Campaign
A critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS is being actively exploited in a large-scale cyberattack affecting over 700 websites, including those of Harvard University, Oxford University, Auburn…

17 articles · Updated May 25, 2026

Recent Intelligence Reports

Hackers Exploit Ghost CMS CVE-2026 — Cybersecuritynews · May 26, 2026
Critical Ghost CMS Vulnerability Exploited to Hack 700+ Websites — Thecyberexpress · May 26, 2026
Ghost CMS Vulnerability Exploited to Infect 700 Sites With ClickFix Malware — Gbhackers · May 26, 2026
Ghost CMS CVE-2026-26980 Mass Attack Hijacks 700+ Sites for ClickFix Malware Campaigns — Rescana · May 26, 2026
Ghost CMS flaw abused to push ClickFix attacks on hundreds of sites — Securityaffairs.Co · May 25, 2026
Ghost CMS SQL Injection Hits 700 Sites: Harvard, DuckDuckGo Serve Fake Cloudflare Malware — Techtimes · May 25, 2026
Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks — Thehackernews · May 25, 2026
Ghost CMS Users Under Attack: Why Developers Must Act Fast — Techgig · May 25, 2026

Data Breach Malware Sql Injection ClickFix Attacks Auburn University Cloudflare DuckDuckGo Education Harvard University Oxford University University Of Oxford Brazil