3 matches found
CVE-2026-27150
CVE-2026-27150 (Discourse) affects the Data Explorer component (QueryGroupBookmarkable) in Discourse. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, missing authorization in validate_before_create allowed any logged-in user to create bookmarks for query groups they lack access to, enabling ...
5.3CVSS5.5AI score0.00153EPSS
SaveExploits0References1Affected Software1
20