https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T04:27:14.320125+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-discourse-2026-30888 BIT-discourse-2026-30888 — Discourse has moderator privilege escalation via arbitrary post_id in suspend/silence endpoint 2026-10-12T04:27:14.338955+00:00

Affected: Bitnami: discourse

Discourse is an open-source discussion platform. Versions prior to 2026.3.0, 2026.2.1, and 2026.1.2 allow a moderator to edit site policy documents (ToS, guidelines, privacy policy) that they are explicitly prohibited from modifying. Versions 2026.3.0, 2026.2.1, and 2026.1.2 contain a patch. No known workarounds are available.

 https://cve.radiocsirt.org/vuln/euvd-2026-276799 EUVD-2026-276799 2026-10-12T04:27:14.338998+00:00 EUVD-2026-276799 https://cve.radiocsirt.org/vuln/fkie_cve-2026-30888 fkie_cve-2026-30888 2026-10-12T04:27:14.339013+00:00

Discourse is an open-source discussion platform. Versions prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 allow a moderator to edit site policy documents (ToS, guidelines, privacy policy) that they are explicitly prohibited from modifying. Versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 contain a patch. No known workarounds are available.