CyberSecBulletin

GhostManager vulnerabilities

We track 1 vulnerability in GhostManager products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 24, 2026.

1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score

Latest GhostManager vulnerabilities

  • 7.1 High severity

    Ghostwriter: Authorization Bypass Through User-Controlled Key

    CVE-2026-78203GhostManager

    Ghostwriter before 7.1.2 fails to validate template ownership in the report template swap endpoint, allowing attackers to attach client-scoped templates from other clients to their own reports. Attackers can exploit sequential template primary keys to enumerat