Ghosted: Surviving CVE-2026-26980 Because I Actually Configured Nginx

We all know what happens when you leave edge software unpatched. Earlier this year, I was keeping an eye on CVE-2026-24778. It was an XSS flaw in the Ghost members Portal component where a malicious link could trigger JavaScript execution under a staff member&apos;s session and