81 matches found
CVE-2026-28218 Discourse's Fail-Open Access Control in Data Explorer Plugin Allows Unauthorized SQL Query Execution
Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, fail-open access control in Data Explorer plugin allows any authenticated user to execute SQL queries that have no explicit group assignments, including built-in system queries. Versions 2025.12....
EUVD-2026-8899
Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, fail-open access control in Data Explorer plugin allows any authenticated user to execute SQL queries that have no explicit group assignments, including built-in system queries. Versions 2025.12....
CVE-2026-28218
CVE-2026-28218 affects Discourse: the Data Explorer plugin has a fail-open access control that lets any authenticated user execute SQL queries without explicit group permissions. Affected versions are prior to 2025.12.2, 2026.1.1, and 2026.2.0. Remediation: upgrade to the patched releases (2025.1...
CVE-2026-27150
Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, missing validatebeforecreate authorization in Data Explorer's QueryGroupBookmarkable allows any logged-in user to create bookmarks for query groups they don't have access to, enabling metadata...
CVE-2026-27150 Discourse doesn't ensure guardian check when creating QueryGroupBookmark
Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, missing validatebeforecreate authorization in Data Explorer's QueryGroupBookmarkable allows any logged-in user to create bookmarks for query groups they don't have access to, enabling metadata...
EUVD-2026-8889
Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, missing validatebeforecreate authorization in Data Explorer's QueryGroupBookmarkable allows any logged-in user to create bookmarks for query groups they don't have access to, enabling metadata...
Discourse 安全漏洞
Discourse is Discourse open source set of open source community discussion platform. The platform includes features such as community , e-mail and chat rooms . Discourse suffers from a security vulnerability that stems from a lack of validatebeforecreate authorization in Data Explorer's...
PT-2026-22195
Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2025.12.2 Discourse versions prior to 2026.1.1 Discourse versions prior to 2026.2.0 Description Discourse is an open source discussion platform. A flaw exists in the Data Explorer plugin's access control mechanism...
Discourse 访问控制错误漏洞
Discourse is Discourse open source set of open source community discussion platform. The platform includes features such as community , e-mail and chat rooms . Discourse suffers from an Access Control Error vulnerability that stems from an open Access Control Failure in the Data Explorer plugin,...
PT-2026-22185
Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2025.12.2 Discourse versions prior to 2026.1.1 Discourse versions prior to 2026.2.0 Description A missing validate before create authorization check in the Data Explorer's QueryGroupBookmarkable component allows any...
CVE-2026-21524
Exposure of sensitive information to an unauthorized actor in Azure Data Explorer allows an unauthorized attacker to disclose information over a network...
CVE-2026-21524
Exposure of sensitive information to an unauthorized actor in Azure Data Explorer allows an unauthorized attacker to disclose information over a network...
CVE-2026-21524 Azure Data Explorer Information Disclosure Vulnerability
...
CVE-2026-21524
CVE-2026-21524 describes an information-disclosure vulnerability in Azure Data Explorer exposed to the network. Affected component is Azure Data Explorer’s data exposure path leading to unauthorized disclosure of information. Impact is Confidentiality High with network-based access and no require...
CVE-2026-21524 Azure Data Explorer Information Disclosure Vulnerability
...
CVE-2026-21524
Exposure of sensitive information to an unauthorized actor in Azure Data Explorer allows an unauthorized attacker to disclose information over a network...
Azure Data Explorer Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Azure Data Explorer allows an unauthorized attacker to disclose information over a network...
PT-2026-4309
Name of the Vulnerable Software and Affected Versions Azure Data Explorer affected versions not specified Description An issue exists in Azure Data Explorer that allows an unauthorized attacker to disclose sensitive information over a network. The issue involves the exposure of sensitive...
Microsoft Azure Data Explorer information leakage vulnerability
Microsoft Azure Data Explorer is a cloud-native data platform developed by the American company Microsoft. There is an information leakage vulnerability present in Microsoft Azure Data Explorer. Attackers can exploit this vulnerability to leak information through the network...