Add Ghost CMS Authenticated RCE Exploit (CVE-2026-29053) - #21234

Merged

msutovsky-r7 merged 27 commits into

rapid7:masterfrom

vognik:CVE-2026-29053

Aug 7, 2026

Commits on Aug 5, 2026

Add CVE-2026-29053
vognik
committed
21f1fba
migrate get_page func to send_request_cgi
vognik
committed
73771d0
remove shit
vognik
committed
db3d5c7
add docs
vognik
committed
edb67e2
add windows support
vognik
committed
db50f60
fix version range and add delay option
vognik
committed
e2e52b0
replace delay_seconds to delay_ms
vognik
committed
c146dc7
add some random
vognik
committed
5bc8487
fix cleanup process
vognik
committed
282823f
remove badchars
vognik
committed
f542377
Apply suggestions from code review

vognik
and
Copilot
committed
2cfdeaa
add invitation flow
vognik
committed
e70f05e
migrate theme licence into root directory
vognik
committed
5e463d0
add CVE-2026-22594 exploitation
vognik
committed
5c68dac
add GHOST_API_ADMIN_SESSION auth method
vognik
committed
356af6c
add signing cookie auth method
vognik
committed
cf70bea
add documentation for raw cookie and cookie signing methods
vognik
committed
191ba5f
add suggestions from @msutovsky-r7
vognik
committed
aa4ffd7
migrate to datastore variables instead of stdin
vognik
committed
06bed34
fix name of the module in docs
vognik
committed
03705df
refactor: invitation flow
vognik
committed
a0348ae
make errors more verbose
vognik
committed
a115588

Commits on Aug 6, 2026

use local theme payload only for api_key action
vognik
committed
18c17d4

Commits on Aug 7, 2026

add dependency jwt to Gemfile.lock
vognik
committed
a2a954d
fix non-ASCII characters in metadata
vognik
committed
3333506
add support for header fields in JWT encode
vognik
committed
0dd3ab1
migrate to native jwt generation
vognik
committed
8034ef0