https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T05:04:44.620397+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-discourse-2026-27935 BIT-discourse-2026-27935 — Discourse leaks private topic metadata to non-authorized users 2026-10-07T05:04:44.659725+00:00

Affected: Bitnami: discourse

Discourse is an open-source discussion platform. Versions prior to 2026.3.0, 2026.2.1, and 2026.1.2 have a vulnerability in an API endpoint that discloses private topic metadata of admin users to moderator users even if the moderators do not have access to the private topics. Versions 2026.3.0, 2026.2.1, and 2026.1.2 contain a patch. No known workarounds are available.

 https://cve.radiocsirt.org/vuln/cnvd-2026-17480 cnvd-2026-17480 2026-10-07T05:04:44.659785+00:00 cnvd-2026-17480 https://cve.radiocsirt.org/vuln/euvd-2026-276685 EUVD-2026-276685 2026-10-07T05:04:44.659804+00:00 EUVD-2026-276685 https://cve.radiocsirt.org/vuln/fkie_cve-2026-27935 fkie_cve-2026-27935 2026-10-07T05:04:44.659816+00:00

Discourse is an open-source discussion platform. Versions prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 have a vulnerability in an API endpoint that discloses private topic metadata of admin users to moderator users even if the moderators do not have access to the private topics. Versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 contain a patch. No known workarounds are available.