Log in Start free

Ghostfolio

Products

ProductCVEsExploitedLatest
Ghostfolio5–Aug 7, 2026

Exploited and recent CVEs

  • CVE-2026-47127 Medium 6.5 Ghostfolio has a Stripe subscription bypass 0.3%
  • CVE-2026-59708 High 7.5 Ghostfolio - Unauthorized Portfolio Data Exposure via Public Endpoint 0.6%
  • CVE-2026-59709 Medium 4.3 Ghostfolio - Unauthorized Portfolio Holding Tag Modification via Missing Permission Check 0.3%
  • CVE-2026-28785 Critical 9.3 Ghostfolio: Time-Based Blind SQL Injection in Manual Asset Import 0.4%
  • CVE-2026-28680 Critical 9.3 Ghostfolio: Full-Read SSRF in Manual Asset Import 0.3%