Lucene search
K

2870 matches found

CVE
CVE
added 2026/02/26 2:58 p.m.19 views

CVE-2026-26077

CVE-2026-26077 – Discourse webhook authentication bypass . Affects Discourse prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, where several webhook endpoints (SendGrid, Mailjet, Mandrill, Postmark, SparkPost) in the WebhooksController accepted requests without a valid authentication token whe...

6.5CVSS5.3AI score0.0024EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/02/26 2:58 p.m.20 views

CVE-2026-26077 Discourse doesn't ensure webhooks require a token

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, several webhook endpoints SendGrid, Mailjet, Mandrill, Postmark, SparkPost in the WebhooksController accepted requests without a valid authentication token when no token was configured. This...

6.5CVSS0.0024EPSS
Exploits0References1
OSV
OSV
added 2026/02/26 2:58 p.m.5 views

CVE-2026-26077 Discourse doesn't ensure webhooks require a token

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, several webhook endpoints SendGrid, Mailjet, Mandrill, Postmark, SparkPost in the WebhooksController accepted requests without a valid authentication token when no token was configured. This...

6.5CVSS5.9AI score0.0024EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/02/26 2:58 p.m.5 views

CVE-2026-26077 Discourse doesn't ensure webhooks require a token

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, several webhook endpoints SendGrid, Mailjet, Mandrill, Postmark, SparkPost in the WebhooksController accepted requests without a valid authentication token when no token was configured. This...

6.5CVSS5.9AI score0.0024EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/26 12:0 a.m.4 views

Discourse 授权问题漏洞

Discourse is an open-source community discussion platform developed by Discourse. This platform includes features such as communities, email communication, and chat rooms. Versions of Discourse before 2025.12.2, 2026.1.1, and 2026.2.0 have vulnerabilities related to authorization. These...

6.5CVSS5.8AI score0.0024EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/26 12:0 a.m.4 views

Discourse 安全漏洞

Discourse is an open-source community discussion platform developed by Discourse. This platform includes features such as communities, email communication, and chat rooms. Versions of Discourse before 2025.12.2, 2026.1.1, and 2026.2.0 contained security vulnerabilities. These vulnerabilities...

7.5CVSS5.8AI score0.00224EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/26 12:0 a.m.5 views

Discourse 安全漏洞

Discourse is an open-source community discussion platform developed by Discourse. This platform includes features such as communities, email communication, and chat rooms. Versions of Discourse before 2025.12.2, 2026.1.1, and 2026.2.0 contain security vulnerabilities. These vulnerabilities stem...

5.4CVSS5.8AI score0.00151EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/26 12:0 a.m.3 views

Discourse 安全漏洞

Discourse is an open-source community discussion platform developed by Discourse. This platform includes features such as communities, email communication, and chat rooms. Versions of Discourse before 2025.12.2, 2026.1.1, and 2026.2.0 contain security vulnerabilities. These vulnerabilities stem...

7.5CVSS5.8AI score0.00239EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/26 12:0 a.m.4 views

Discourse 安全漏洞

Discourse is an open-source community discussion platform developed by Discourse. This platform includes features such as communities, email communication, and chat rooms. Versions of Discourse before 2025.12.2, 2026.1.1, and 2026.2.0 contain security vulnerabilities. These vulnerabilities stem...

4.3CVSS5.8AI score0.00152EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/26 12:0 a.m.4 views

Discourse 安全漏洞

Discourse is an open-source community discussion platform developed by Discourse. This platform includes features such as communities, email communication, and chat rooms. Versions of Discourse before 2025.12.2, 2026.1.1, and 2026.2.0 contain security vulnerabilities. These vulnerabilities stem...

2.7CVSS5.8AI score0.00168EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/26 12:0 a.m.5 views

Discourse 安全漏洞

Discourse is an open-source community discussion platform developed by Discourse. This platform includes features such as communities, email communication, and chat rooms. Versions of Discourse before 2025.12.2, 2026.1.1, and 2026.2.0 contained security vulnerabilities. These vulnerabilities...

6.9CVSS5.8AI score0.0028EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/26 12:0 a.m.3 views

Discourse SQL注入漏洞

Discourse is an open-source community discussion platform developed by Discourse. This platform includes features such as communities, email communication, and chat rooms. Versions of Discourse before 2025.12.2, 2026.1.1, and 2026.2.0 have a SQL injection vulnerability. This vulnerability stems...

7.1CVSS5.9AI score0.00226EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/26 12:0 a.m.5 views

Discourse 安全漏洞

Discourse is Discourse open source set of open source community discussion platform. The platform includes features such as community , e-mail and chat rooms . Discourse suffers from a security vulnerability that stems from a lack of validatebeforecreate authorization in Data Explorer's...

5.3CVSS5.8AI score0.00153EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/02/26 12:0 a.m.5 views

Discourse 安全漏洞

Discourse is an open-source community discussion platform developed by Discourse. This platform includes features such as communities, email communication, and chat rooms. Versions of Discourse before 2025.12.2, 2026.1.1, and 2026.2.0 contain security vulnerabilities. These vulnerabilities stem...

5.3CVSS5.8AI score0.00154EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/02/26 12:0 a.m.6 views

Discourse 信息泄露漏洞

Discourse is an open-source community discussion platform developed by Discourse. This platform includes features such as communities, email communication, and chat rooms. Versions of Discourse before 2025.12.2, 2026.1.1, and 2026.2.0 contained a security vulnerability related to information...

7.1CVSS5.8AI score0.00227EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/26 12:0 a.m.6 views

Discourse 访问控制错误漏洞

Discourse is Discourse open source set of open source community discussion platform. The platform includes features such as community , e-mail and chat rooms . Discourse suffers from an Access Control Error vulnerability that stems from a Chat::AddUsersToChannel add member that bypasses private...

5.3CVSS5.8AI score0.00158EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/02/26 12:0 a.m.5 views

Discourse 安全漏洞

Discourse is an open-source community discussion platform developed by Discourse. This platform includes features such as communities, email communication, and chat rooms. Versions of Discourse before 2025.12.2, 2026.1.1, and 2026.2.0 have security vulnerabilities. These vulnerabilities stem from...

5.3CVSS5.8AI score0.00158EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/02/26 12:0 a.m.4 views

Discourse 跨站脚本漏洞

Discourse is an open-source community discussion platform developed by Discourse. This platform includes features such as communities, email communication, and chat rooms. Versions of Discourse before 2025.12.2, 2026.1.1, and 2026.2.0 contained a cross-site scripting vulnerability. This...

6.1CVSS5.7AI score0.00166EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/02/26 12:0 a.m.4 views

Discourse 访问控制错误漏洞

Discourse is Discourse open source set of open source community discussion platform. The platform includes features such as community , e-mail and chat rooms . Discourse suffers from an Access Control Error vulnerability that stems from an open Access Control Failure in the Data Explorer plugin,...

5.4CVSS6AI score0.00151EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/26 12:0 a.m.5 views

Discourse 安全漏洞

Discourse is an open-source community discussion platform developed by Discourse. This platform includes features such as communities, email communication, and chat rooms. Versions of Discourse before 2025.12.2, 2026.1.1, and 2026.2.0 contain security vulnerabilities. These vulnerabilities stem...

5.3CVSS5.8AI score0.00197EPSS
Exploits0References2
Rows per page
Query Builder