{"id":"EUVD-2026-92762","enisaUuid":"d5481c9a-e583-357b-9458-e33b8d7ed9d7","description":"Ghost is a Node.js content management system. From 0.7.2 until 6.64.0, any staff-level user was able to determine the relative ordering of other staff users\u0027 hashed passwords. This does not directly disclose password hashes, and does not provide a practical path to recovering a password. This issue is fixed in version 6.64.0.","datePublished":"Oct 5, 2026, 7:11:52 PM","dateUpdated":"Oct 5, 2026, 7:54:24 PM","baseScore":3.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","references":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-53vv-xm9f-mm82\nhttps://github.com/TryGhost/Ghost/pull/30760\nhttps://github.com/TryGhost/Ghost/commit/4fb587e4d49667f929b87f7d6a873ae5e9cc087f\nhttps://github.com/TryGhost/Ghost/releases/tag/v6.64.0\n","aliases":"CVE-2026-105652\nGHSA-53vv-xm9f-mm82\n","assigner":"GitHub_M","epss":0.26,"enisaIdProduct":[{"id":"c4956795-d97c-3810-a280-785c05a51b0a","product":{"name":"Ghost","vendor":{"name":"TryGhost"}},"product_version":"0.7.2, \u003c 6.64.0"}],"enisaIdVendor":[{"id":"8e810940-e436-3808-8d10-235bbd019649","vendor":{"name":"TryGhost"}}],"enisaIdVulnerability":[{"id":"1c5d1b1c-e6d0-38fa-8cd7-14a8a5f2fa1f","vulnerability":{"id":"GHSA-53vv-xm9f-mm82","description":"Ghost: Password Hash Ordering Disclosure in Ghost Admin API","datePublished":"Oct 7, 2026, 8:27:22 PM","dateUpdated":"Oct 7, 2026, 8:27:22 PM","baseScore":0.0,"references":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-53vv-xm9f-mm82\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-105652\nhttps://github.com/TryGhost/Ghost/pull/30760\nhttps://github.com/TryGhost/Ghost/commit/4fb587e4d49667f929b87f7d6a873ae5e9cc087f\nhttps://github.com/TryGhost/Ghost\nhttps://github.com/TryGhost/Ghost/releases/tag/v6.64.0\n","enisa_id":"EUVD-2026-92762\n","aliases":"GHSA-53vv-xm9f-mm82\nCVE-2026-105652\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:07:07 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"365654d1-95de-3e35-ba45-9ed824365d97","vulnerability":{"id":"CVE-2026-105652","description":"Ghost is a Node.js content management system. From 0.7.2 until 6.64.0, any staff-level user was able to determine the relative ordering of other staff users\u0027 hashed passwords. This does not directly disclose password hashes, and does not provide a practical path to recovering a password. This issue is fixed in version 6.64.0.","datePublished":"Oct 5, 2026, 7:11:52 PM","dateUpdated":"Oct 5, 2026, 7:54:24 PM","status":"PUBLISHED","baseScore":3.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","references":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-53vv-xm9f-mm82\nhttps://github.com/TryGhost/Ghost/pull/30760\nhttps://github.com/TryGhost/Ghost/commit/4fb587e4d49667f929b87f7d6a873ae5e9cc087f\nhttps://github.com/TryGhost/Ghost/releases/tag/v6.64.0\n","enisa_id":"EUVD-2026-92762\n","assigner":"GitHub_M","epss":0.26,"dataProcessed":"Nov 2, 2026, 7:16:47 AM","vulnerabilityProduct":[{"id":"13a2ea40-84de-3f89-a17e-28ac915b5509","product":{"name":"Ghost","vendor":{"name":"TryGhost"}},"product_version":"0.7.2, \u003c 6.64.0"}],"vulnerabilityVendor":[{"id":"0b98418c-a1f2-39e4-a054-73ca10226464","vendor":{"name":"TryGhost"}}]}}],"enisaIdAdvisory":[]}