clickfix

(2 articles)

May 25, 2026

Ghost CMS CVE-2026-26980: 700+ Sites Hijacked

Ghost CMS CVE-2026-26980 is being actively exploited to hijack sites for ClickFix attacks. Learn how it works and how to protect your install now.

May 24, 2026

Ghost CMS SQL Injection CVE-2026-26980 Exploited

CVE-2026-26980 in Ghost CMS is being actively exploited in a ClickFix campaign hitting 700+ domains. Here's what happened and how to protect your site.