Skip to content
OpenAdvisories

Vendor

ghostfolio

5 known vulnerabilities.

Products

ghostfolio 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-59708

    Ghostfolio - Unauthorized Portfolio Data Exposure via Public Endpoint

    The GET /api/v1/public/:accessId/portfolio endpoint in ghostfolio accepts private access IDs without validating granteeUserId filtering, allowing unauthenticated access to full portfolio data. Attackers with a private access ID can retrieve sensitive portfoli…

    ghostfolio ghostfolio