Vulnerabilities in discourse

323 results
CVE-2026-32615MEDIUMDiscourse: Category group moderators can perform actions on topics in restricted categories without read accessEPSS 0.2%CVE-2026-44783MEDIUMDiscourse: Replying to a whisper lets non-whisperers create staff-only whisper postsEPSS 0.1%CVE-2026-91132MEDIUMDiscourse: Wildcard iframe origin allowlist bypass via authority separatorsEPSS 0.1%