https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T12:03:20.254138+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-24332 CVE-2026-24332 2026-10-04T12:03:20.270464+00:00

Affected: Discord WebSocket API service

Discord through 2026-01-16 allows gathering information about whether a user's client state is Invisible (and not actually offline) because the response to a WebSocket API request includes the user in the presences array (with "status": "offline"), whereas offline users are omitted from the presences array. This is arguably inconsistent with the UI description of Invisible as "You will appear offline." NOTE: a third-party report suggests that this was remediated later in 2026.