{
  "id": "CVE-2026-105678",
  "url": "https://spydr.io/cve/CVE-2026-105678",
  "published": "2026-10-05T20:17:14.913Z",
  "modified": "2026-10-05T20:17:14.913Z",
  "score": 4.3,
  "severity": "medium",
  "cvss_version": "3.1",
  "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
  "score_source": "github.com",
  "epss": null,
  "epss_percentile": null,
  "exploited": false,
  "kev": null,
  "ssvc_exploitation": null,
  "vendors": [
    "TryGhost"
  ],
  "products": [
    "TryGhost Ghost"
  ],
  "cwes": [
    "CWE-269",
    "CWE-863"
  ],
  "description": "Ghost is a Node.js content management system. From 0.5.0 until 6.64.0, staff users with the Editor or Super Editor role were able to assign their own role to Author and Contributor users, despite not having permission to assign that role. This issue is fixed in version 6.64.0.",
  "status": "Received",
  "score_type": "Secondary",
  "scores": {
    "cvss_v40": null,
    "cvss_v31": 4.3,
    "cvss_v30": null
  },
  "references": [
    {
      "url": "https://github.com/TryGhost/Ghost/commit/99c5642b9bb481df4811a004a6f19d6143ed9aaf",
      "tags": []
    },
    {
      "url": "https://github.com/TryGhost/Ghost/issues/30764",
      "tags": []
    },
    {
      "url": "https://github.com/TryGhost/Ghost/releases/tag/v6.64.0",
      "tags": []
    },
    {
      "url": "https://github.com/TryGhost/Ghost/security/advisories/GHSA-4pvx-fwjj-8gpc",
      "tags": []
    }
  ],
  "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105678",
  "covered_in": [],
  "attribution": [
    {
      "source": "NVD",
      "url": "https://nvd.nist.gov",
      "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD."
    },
    {
      "source": "CISA KEV",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "notice": "Known exploited vulnerabilities from the CISA KEV catalog."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss",
      "notice": "Exploit prediction scores from FIRST EPSS."
    }
  ]
}