{"id":"EUVD-2026-91429","enisaUuid":"ce287891-b4be-3386-879e-50d7c8963d5c","description":"Ghost from 6.10.3 before 6.64.0 contains a remote code execution vulnerability that allows authenticated administrators to run code by abusing theme translation file loading. Attackers with administrator access can upload a crafted theme containing malicious translation files to execute arbitrary code on the Ghost server.","datePublished":"Oct 2, 2026, 11:38:00 AM","dateUpdated":"Oct 2, 2026, 5:35:51 PM","baseScore":8.6,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-jj74-hc2q-xrvm\nhttps://www.vulncheck.com/advisories/ghost-from-6.10.3-before-6.64.0-rce-via-theme-translation-files\n","aliases":"CVE-2026-104418\nGHSA-5pc5-4pc7-5x44\n","assigner":"VulnCheck","epss":0.65,"enisaIdProduct":[{"id":"a4f18ad0-4ab5-3f33-bc4e-7eefd2c3e666","product":{"name":"Ghost","vendor":{"name":"TryGhost"}},"product_version":"6.10.3 \u003c6.64.0"}],"enisaIdVendor":[{"id":"3d645ca5-250a-3cad-b71b-c2d3f70989f6","vendor":{"name":"TryGhost"}}],"enisaIdVulnerability":[{"id":"6f8b9408-cabf-39c5-bde4-b82291f6cae2","vulnerability":{"id":"CVE-2026-104418","description":"Ghost from 6.10.3 before 6.64.0 contains a remote code execution vulnerability that allows authenticated administrators to run code by abusing theme translation file loading. Attackers with administrator access can upload a crafted theme containing malicious translation files to execute arbitrary code on the Ghost server.","datePublished":"Oct 2, 2026, 11:38:00 AM","dateUpdated":"Oct 2, 2026, 5:35:51 PM","status":"PUBLISHED","baseScore":8.6,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-jj74-hc2q-xrvm\nhttps://www.vulncheck.com/advisories/ghost-from-6.10.3-before-6.64.0-rce-via-theme-translation-files\n","enisa_id":"EUVD-2026-91429\n","assigner":"VulnCheck","epss":0.65,"dataProcessed":"Nov 8, 2026, 7:15:54 AM","vulnerabilityProduct":[{"id":"ccc71eb2-e8ee-34c6-af1a-72f6ba06faa9","product":{"name":"Ghost","vendor":{"name":"TryGhost"}},"product_version":"6.10.3 \u003c6.64.0"}],"vulnerabilityVendor":[{"id":"e6f157f6-201e-34f7-91a4-66b89835006d","vendor":{"name":"TryGhost"}}]}},{"id":"7fa1ee91-86d4-34e2-a010-7c456ee09b5b","vulnerability":{"id":"GHSA-5pc5-4pc7-5x44","description":"Ghost from 6.10.3 before 6.64.0 contains a remote code execution vulnerability that allows authenticated administrators to run code by abusing theme translation file loading. Attackers with administrator access can upload a crafted theme containing malicious translation files to execute arbitrary code on the Ghost server.","datePublished":"Oct 2, 2026, 12:31:14 PM","dateUpdated":"Oct 2, 2026, 12:31:14 PM","baseScore":0.0,"references":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-jj74-hc2q-xrvm\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-104418\nhttps://www.vulncheck.com/advisories/ghost-from-6.10.3-before-6.64.0-rce-via-theme-translation-files\n","enisa_id":"EUVD-2026-91429\n","aliases":"GHSA-5pc5-4pc7-5x44\nCVE-2026-104418\n","epss":0.0,"dataProcessed":"Nov 8, 2026, 2:04:48 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}