CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

OSV•added 2026/03/27 7:10 a.m.•1 views

BIT-DISCOURSE-2026-27935 Discourse leaks private topic metadata to non-authorized users

Discourse is an open-source discussion platform. Versions prior to 2026.3.0, 2026.2.1, and 2026.1.2 have a vulnerability in an API endpoint that discloses private topic metadata of admin users to moderator users even if the moderators do not have access to the private topics. Versions 2026.3.0,...

6.9CVSS5.9AI score0.0005EPSS

Exploits0References5

Cvelist•added 2026/03/19 9:33 p.m.•15 views

CVE-2026-27935 Discourse leaks private topic metadata to non-authorized users

Discourse is an open-source discussion platform. Versions prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 have a vulnerability in an API endpoint that discloses private topic metadata of admin users to moderator users even if the moderators do not have access to the private topics. Versions...

6.9CVSS0.0005EPSS

Exploits0References4

CVE•added 2026/03/19 9:33 p.m.•12 views

CVE-2026-27935

Product and vulnerability : Discourse (open-source discussion platform) is affected. Affected versions : prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2. Root cause : an API endpoint vulnerability that discloses private topic metadata of admin users to moderator users who do not have access to...

6.9CVSS5.8AI score0.0005EPSS

Exploits0References4Affected Software1