Boolean-Oracle

Strapi CMS Admin Account Takeover via Query Filter Bypass — CVE-2026-27886 newCVE-2026-27886webCRITICALPatched2026-07-05Ghost CMS Content API — Unauthenticated Blind SQL Injection (CVE-2026-26980) new EPSS 70%CVE-2026-26980webCRITICALPatched2026-07-05