MEDIUMVulnerability
Global

Ghost CMS Mass Compromised via CVE-2026-26980, Now Fueling ClickFix Attacks

·Source: r/blueteamsec

Updated:

Executive Summary

[object Object]

Analysis

[object Object]

Indicators of Compromise (1)

CVE (1)
CVE-2026-26980
NVDMITRE CVE
Source Attribution

Originally published by r/blueteamsec on May 21, 2026.

Related Threats

MEDIUMVulnerability

Wireshark 4.6.6 Released, (Sun, May 24th)

Wireshark release 4.6.6 fixes 1 vulnerability and 11 bugs.

SANS ISC
CRITICALVulnerability

Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign

A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious JavaScript code that triggers ClickFix attack flows. [...]

CVE-2026-26980
BleepingComputer
MEDIUMVulnerability

France Sees More Violent Attacks on Crypto Holders Than Any Other Country

Julian Lim reports: The hardest part of crypto security used to be keeping private keys away from hackers. In France, the problem has moved much closer to home. A new report says roughly 70% of documented wrench attacks against crypto holders and their families are happening there, turning a niche security term into a very... Source

DataBreaches.net