{"uuid": "ba7d3024-6ae9-4b94-813b-a4da519c3bd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26980", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mmgg6gjmja2o", "content": "700+ Ghost CMS sites compromised via CVE-2026-26980 (SQLi \u2192 Admin API Key theft) and weaponized for ClickFix attacks. Victims include Harvard, Oxford, Auburn and more. Two threat actors now fighting over the sam\u2026\n\n\ud83d\udd01 RT @Xlab_qax | reposted by @craiu\nhttps://x.com/Xlab_qax/status/2057457233252807090", "creation_timestamp": "2026-05-22T07:32:43.724328Z"}