Ghost CMS CVE-2026-26980 Exploited to Deploy Malware

Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks

Threat actors are exploiting CVE-2026-26980, a critical SQL injection vulnerability in Ghost CMS, to compromise over 700 websites and inject malicious JavaScript code that fuels ClickFix attacks targeting users across universities, AI, blockchain, and financial sectors.