{"id":"CVE-2026-104417","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-104417","generatedAt":"2026-10-28T01:02:30.058Z","title":"Ghost from 1.20.0 before 6.64.0 contains a path traversal vulnerability in theme translation file loading that allows authenticated administrators to read JSON files outside the active theme directory.","description":"Ghost from 1.20.0 before 6.64.0 contains a path traversal vulnerability in theme translation file loading that allows authenticated administrators to read JSON files outside the active theme directory. Attackers can manipulate the locale setting to load JSON files elsewhere on the server, exposing server configuration secrets.","published":"2026-10-02T12:17:12.000Z","lastModified":"2026-10-02T17:59:09.000Z","status":"Deferred","sourceIdentifier":"disclosure@vulncheck.com","cvss":{"version":"4.0","score":6.9,"severity":"MEDIUM","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-22"],"affected":[],"epss":{"score":0.00366,"percentile":0.3016,"date":"2026-10-26","history":[{"date":"2026-10-03","score":0.00366,"percentile":0.28108}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.37%). Track it; it rarely justifies an emergency change on its own."},"changes":[{"kind":"new","label":"New CVE","at":"2026-10-02T12:17:12.000Z","detail":{"score":"6.9","severity":"MEDIUM","publishedAt":"2026-10-02T12:17:11.567Z"},"summary":"New CVE, medium severity (CVSS 6.9)."}],"references":[{"url":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-m382-6jw4-fmp6","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/ghost-1.20.0-before-6.64.0-path-traversal-via-locale-setting","source":"disclosure@vulncheck.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-104417","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}