https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T21:38:36.249254+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-discourse-2026-29072 BIT-discourse-2026-29072 — Discourse missing permission check for policy creation in discourse-policy 2026-10-19T21:38:36.251493+00:00

Affected: Bitnami: discourse

Discourse is an open-source discussion platform. Prior to versions 2026.3.0, 2026.2.1, and 2026.1.2, users who do not belong to the allowed policy creation groups can create functional policy acceptance widgets in posts under the right conditions. Versions 2026.3.0, 2026.2.1, and 2026.1.2 contain a patch. As a workaround, disable the discourse-policy plugin by disabling the `policy_enabled` site setting.

 https://cve.radiocsirt.org/vuln/euvd-2026-276683 EUVD-2026-276683 2026-10-19T21:38:36.251542+00:00 EUVD-2026-276683 https://cve.radiocsirt.org/vuln/fkie_cve-2026-29072 fkie_cve-2026-29072 2026-10-19T21:38:36.251557+00:00

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, users who do not belong to the allowed policy creation groups can create functional policy acceptance widgets in posts under the right conditions. Versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 contain a patch. As a workaround, disable the discourse-policy plugin by disabling the `policy_enabled` site setting.