https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T22:59:07.080556+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-discourse-2026-33428 BIT-discourse-2026-33428 — Discourse Allows Unauthorized Access to Deleted Posts Index via Group Membership 2026-10-15T22:59:07.124493+00:00

Affected: Bitnami: discourse

Discourse is an open-source discussion platform. Prior to versions 2026.3.0, 2026.2.1, and 2026.1.2, a non-staff user with elevated group membership could access deleted posts belonging to any user due to an overly broad authorization check on the deleted posts index endpoint. Versions 2026.3.0, 2026.2.1, and 2026.1.2 contain a patch. No known workarounds are available.

 https://cve.radiocsirt.org/vuln/cnvd-2026-17481 cnvd-2026-17481 2026-10-15T22:59:07.124561+00:00 cnvd-2026-17481 https://cve.radiocsirt.org/vuln/euvd-2026-277354 EUVD-2026-277354 2026-10-15T22:59:07.124587+00:00 EUVD-2026-277354 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33428 fkie_cve-2026-33428 2026-10-15T22:59:07.124612+00:00

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, a non-staff user with elevated group membership could access deleted posts belonging to any user due to an overly broad authorization check on the deleted posts index endpoint. Versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 contain a patch. No known workarounds are available.