EUVD-2026-8899

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, fail-open access control in Data Explorer plugin allows any authenticated user to execute SQL queries that have no explicit group assignments, including built-in system queries. Versions 2025.12....

CVE-2026-28218

CVE-2026-28218 affects Discourse: the Data Explorer plugin has a fail-open access control that lets any authenticated user execute SQL queries without explicit group permissions. Affected versions are prior to 2025.12.2, 2026.1.1, and 2026.2.0. Remediation: upgrade to the patched releases (2025.1...

CVE-2026-27150

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, missing validatebeforecreate authorization in Data Explorer's QueryGroupBookmarkable allows any logged-in user to create bookmarks for query groups they don't have access to, enabling metadata...

CVE-2026-27150 Discourse doesn't ensure guardian check when creating QueryGroupBookmark

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, missing validatebeforecreate authorization in Data Explorer's QueryGroupBookmarkable allows any logged-in user to create bookmarks for query groups they don't have access to, enabling metadata...

EUVD-2026-8889

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, missing validatebeforecreate authorization in Data Explorer's QueryGroupBookmarkable allows any logged-in user to create bookmarks for query groups they don't have access to, enabling metadata...

Discourse 安全漏洞

Discourse is Discourse open source set of open source community discussion platform. The platform includes features such as community , e-mail and chat rooms . Discourse suffers from a security vulnerability that stems from a lack of validatebeforecreate authorization in Data Explorer's...

PT-2026-22195

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2025.12.2 Discourse versions prior to 2026.1.1 Discourse versions prior to 2026.2.0 Description Discourse is an open source discussion platform. A flaw exists in the Data Explorer plugin's access control mechanism...

PT-2026-22185

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2025.12.2 Discourse versions prior to 2026.1.1 Discourse versions prior to 2026.2.0 Description A missing validate before create authorization check in the Data Explorer's QueryGroupBookmarkable component allows any...

Discourse 访问控制错误漏洞

Discourse is Discourse open source set of open source community discussion platform. The platform includes features such as community , e-mail and chat rooms . Discourse suffers from an Access Control Error vulnerability that stems from an open Access Control Failure in the Data Explorer plugin,...

CVE-2026-21524

Exposure of sensitive information to an unauthorized actor in Azure Data Explorer allows an unauthorized attacker to disclose information over a network...

CVE-2026-21524

Exposure of sensitive information to an unauthorized actor in Azure Data Explorer allows an unauthorized attacker to disclose information over a network...

CVE-2026-21524 Azure Data Explorer Information Disclosure Vulnerability

...

CVE-2026-21524

CVE-2026-21524 describes an information-disclosure vulnerability in Azure Data Explorer exposed to the network. Affected component is Azure Data Explorer’s data exposure path leading to unauthorized disclosure of information. Impact is Confidentiality High with network-based access and no require...

CVE-2026-21524 Azure Data Explorer Information Disclosure Vulnerability

...

CVE-2026-21524

Exposure of sensitive information to an unauthorized actor in Azure Data Explorer allows an unauthorized attacker to disclose information over a network...

Azure Data Explorer Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Azure Data Explorer allows an unauthorized attacker to disclose information over a network...

PT-2026-4309

Name of the Vulnerable Software and Affected Versions Azure Data Explorer affected versions not specified Description An issue exists in Azure Data Explorer that allows an unauthorized attacker to disclose sensitive information over a network. The issue involves the exposure of sensitive...

Microsoft Azure Data Explorer information leakage vulnerability

Microsoft Azure Data Explorer is a cloud-native data platform developed by the American company Microsoft. There is an information leakage vulnerability present in Microsoft Azure Data Explorer. Attackers can exploit this vulnerability to leak information through the network...

EUVD-2022-28343

Malicious code in bioql PyPI...

Malicious code in azure-data-explorer-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 472db0b9f7a8b98e15b4d7781f687b3418035ddb8c5f55f1b73d6ca8c4911a3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...