CVE-2023-26510

score

<0.1

cvss

5.7

epss

0.6%

published

2023-03-05

kev added

—

first seen

2026-10-21

Ghost 5.35.0 contains an authorization bypass caused by contributors being able to view draft posts of other users, letting contributors access drafts they should not, exploit requires contributor privileges.