tag

Boolean-Oracle

Strapi CMS Admin Account Takeover via Query Filter Bypass — CVE-2026-27886

CVE-2026-27886· Strapi CMS (Content API) unpatched

Ghost CMS Content API — Unauthenticated Blind SQL Injection (CVE-2026-26980)

CVE-2026-26980· Ghost CMS patched