CVE-2026-55103

The Discourse ActivityPub component is vulnerable to insufficient verification of data authenticity and incorrect authorization. Specifically, inbound ActivityPub processing fails to verify that the authenticated actor matches the Activity actor and owns the referenced federated post. A remote at...