Ghost CMS Vulnerability Exploited to Infect 700 Sites With ClickFix Malware

Hackers are actively exploiting a critical SQL injection vulnerability in Ghost CMS (CVE-2026-26980) to compromise websites and distribute ClickFix malware through large-scale page-poisoning attacks. The vulnerability allows attackers to extract sensitive database contents without authentication, including the Ghost Admin API…

Read more →

The post Ghost CMS Vulnerability Exploited to Infect 700 Sites With ClickFix Malware appeared first on IT Security News.