EUVD-2026-52978Published
Ghost is a Node.js content management system. From 2.2.0 until 6.54.1, Ghost Admin did not invalidate existing sessions on login which could have allowed for session fixation attacks. Successful exploitation would have required another vuln…
Exact source revision recorded 3 Nov 2026 13:01:31 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-70594 · Microsoft / collected KEV context
euvd · EUVD-2026-52978
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.