Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 18:49:05 +0000 BIT-discourse-2026-27935 — Discourse leaks private topic metadata to non-authorized users https://cve.radiocsirt.org/vuln/bit-discourse-2026-27935 <p><strong>Affected:</strong> Bitnami: discourse</p> <p>Discourse is an open-source discussion platform. Versions prior to 2026.3.0, 2026.2.1, and 2026.1.2 have a vulnerability in an API endpoint that discloses private topic metadata of admin users to moderator users even if the moderators do not have access to the private topics. Versions 2026.3.0, 2026.2.1, and 2026.1.2 contain a patch. No known workarounds are available.</p> <p><strong>Affected:</strong> Bitnami: discourse</p> <p>Discourse is an open-source discussion platform. Versions prior to 2026.3.0, 2026.2.1, and 2026.1.2 have a vulnerability in an API endpoint that discloses private topic metadata of admin users to moderator users even if the moderators do not have access to the private topics. Versions 2026.3.0, 2026.2.1, and 2026.1.2 contain a patch. No known workarounds are available.</p> https://cve.radiocsirt.org/vuln/bit-discourse-2026-27935 cnvd-2026-17480 https://cve.radiocsirt.org/vuln/cnvd-2026-17480 cnvd-2026-17480 https://cve.radiocsirt.org/vuln/cnvd-2026-17480 EUVD-2026-276685 https://cve.radiocsirt.org/vuln/euvd-2026-276685 EUVD-2026-276685 https://cve.radiocsirt.org/vuln/euvd-2026-276685 fkie_cve-2026-27935 https://cve.radiocsirt.org/vuln/fkie_cve-2026-27935 <p>Discourse is an open-source discussion platform. Versions prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 have a vulnerability in an API endpoint that discloses private topic metadata of admin users to moderator users even if the moderators do not have access to the private topics. Versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 contain a patch. No known workarounds are available.</p> <p>Discourse is an open-source discussion platform. Versions prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 have a vulnerability in an API endpoint that discloses private topic metadata of admin users to moderator users even if the moderators do not have access to the private topics. Versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 contain a patch. No known workarounds are available.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-27935