# XSA Ghost CVE Audit - 2026

Total CVEs: 17 | Published: 10 | Ghost: 7

## Ghost CVEs

| XSA | CVE | Reporter | Embargo note |
|-----|-----|----------|--------------|
| XSA-489 | CVE-2026-23559 | unknown | True |
| XSA-489 | CVE-2026-23560 | unknown | True |
| XSA-489 | CVE-2026-23561 | unknown | True |
| XSA-489 | CVE-2026-23562 | unknown | True |
| XSA-489 | CVE-2026-42486 | unknown | True |
| XSA-483 | CVE-2026-23556 | Andrii Sultanov of Vates. | False |
| XSA-478 | CVE-2025-58151 | Teddy Astie of Vates. | False |

## All CVEs

| XSA | CVE | Status | Reporter |
|-----|-----|--------|----------|
| XSA-490 | CVE-2025-54518 | PUBLISHED |  |
| XSA-489 | CVE-2026-23559 | **GHOST** |  |
| XSA-489 | CVE-2026-23560 | **GHOST** |  |
| XSA-489 | CVE-2026-23561 | **GHOST** |  |
| XSA-489 | CVE-2026-23562 | **GHOST** |  |
| XSA-489 | CVE-2026-42486 | **GHOST** |  |
| XSA-488 | CVE-2025-54505 | PUBLISHED |  |
| XSA-487 | CVE-2026-31787 | PUBLISHED | Atharva Vartak (@0xAth4rv). |
| XSA-486 | CVE-2026-23558 | PUBLISHED | Claude Opus 4.6 and diagnosed as a secur |
| XSA-485 | CVE-2026-31786 | PUBLISHED | Frediano Ziglio of XenServer. |
| XSA-484 | CVE-2026-23557 | PUBLISHED | Andrii Sultanov of Vates. |
| XSA-483 | CVE-2026-23556 | **GHOST** | Andrii Sultanov of Vates. |
| XSA-482 | CVE-2026-31788 | PUBLISHED | Teddy Astie of Vates. |
| XSA-481 | CVE-2026-23555 | PUBLISHED | Marek Marczykowski-Góreckiof |
| XSA-480 | CVE-2026-23554 | PUBLISHED | Roger Pau Monné of XenServer. |
| XSA-479 | CVE-2026-23553 | PUBLISHED | David Kaplan of AMD. |
| XSA-478 | CVE-2025-58151 | **GHOST** | Teddy Astie of Vates. |