Security News Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks TheHackerNews Daniel Bender 25 May 2026 Share Ghost CMS flaw CVE-2026-26980 enabled attacks on 700+ sites, injecting ClickFix malware through fake CAPTCHA pages.