# discourse. Every CVE that names discourse among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Discourse: Group SMTP test endpoint susceptible to SSRF](https://agentprime.io/advisories/CVE-2026-33185.md) `CVE-2026-33185` · CVE record: discourse discourse · CVSS 5.3 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: Server-side request forgery (SSRF) - [Discourse: Vulnerability in discourse-subscriptions plugin allowing users to self-grant to higher tier subscriptions](https://agentprime.io/advisories/CVE-2026-33074.md) `CVE-2026-33074` · CVE record: discourse discourse · CVSS 6.3 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: Privilege escalation, Broken access control - [Discourse: Authorization bypass in oneboxer via user-controlled category id](https://agentprime.io/advisories/CVE-2026-32951.md) `CVE-2026-32951` · CVE record: discourse discourse · CVSS 4.3 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: Information disclosure - [Discourse: Missing post-level authorization allows whisper metadata disclosure](https://agentprime.io/advisories/CVE-2026-32620.md) `CVE-2026-32620` · CVE record: discourse discourse · CVSS 5.3 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: Information disclosure - [Discourse: Insufficient topic visibility check allows unauthorized poll manipulation in private categories](https://agentprime.io/advisories/CVE-2026-32619.md) `CVE-2026-32619` · CVE record: discourse discourse · CVSS 6.3 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: Broken access control - [Discourse: Unauthorized channel membership inference via excluded_memberships_channel_id](https://agentprime.io/advisories/CVE-2026-32618.md) `CVE-2026-32618` · CVE record: discourse discourse · CVSS 4.3 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: Information disclosure - [Discourse: Category group moderators can perform actions on topics in restricted categories without read access](https://agentprime.io/advisories/CVE-2026-32615.md) `CVE-2026-32615` · CVE record: discourse discourse · CVSS 5.3 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: Broken access control - [Discourse: Stored XSS via unescaped assignee name](https://agentprime.io/advisories/CVE-2026-32607.md) `CVE-2026-32607` · CVE record: discourse discourse · CVSS 2.1 Low · Not analysed yet · Published 31 Mar 2026 · Tags: Cross-site scripting (XSS) - [Discourse: XSS on category description update via API](https://agentprime.io/advisories/CVE-2026-32273.md) `CVE-2026-32273` · CVE record: discourse discourse · CVSS 5.4 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: Cross-site scripting (XSS) - [Discourse: Stored XSS in discourse-ai shared conversations onebox](https://agentprime.io/advisories/CVE-2026-32243.md) `CVE-2026-32243` · CVE record: discourse discourse · CVSS 5.3 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: Cross-site scripting (XSS) - [Discourse: Open redirect via \`sso_destination_url\` cookie in \`enter\`](https://agentprime.io/advisories/CVE-2026-32113.md) `CVE-2026-32113` · CVE record: discourse discourse · CVSS 5.1 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: Open redirect - [Discourse: Admin-only report can be exported by moderators](https://agentprime.io/advisories/CVE-2026-32143.md) `CVE-2026-32143` · CVE record: discourse discourse · CVSS 5.3 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: Information disclosure - [discourse-subscriptions plugin leaking stripe API key in multisite environment](https://agentprime.io/advisories/CVE-2026-33073.md) `CVE-2026-33073` · CVE record: discourse discourse · CVSS 2.0 Low · Not analysed yet · Published 31 Mar 2026 · Tags: Information disclosure - [Discourse Allows Unauthorized Access to Deleted Posts Index via Group Membership](https://agentprime.io/advisories/CVE-2026-33428.md) `CVE-2026-33428` · CVE record: discourse discourse · CVSS 4.9 Medium · Not analysed yet · Published 20 Mar 2026 · Tags: Broken access control - [Discourse Authorization Page Displays Unvalidated Redirect Domain](https://agentprime.io/advisories/CVE-2026-33427.md) `CVE-2026-33427` · CVE record: discourse discourse · CVSS 2.7 Low · Not analysed yet · Published 20 Mar 2026 · Tags: Broken access control - [Discourse users can edit or synonymize hidden tags they can't see](https://agentprime.io/advisories/CVE-2026-33426.md) `CVE-2026-33426` · CVE record: discourse discourse · CVSS 3.5 Low · Not analysed yet · Published 20 Mar 2026 · Tags: Broken access control - [Discourse has inferable private group membership or existence via exclude_groups parameter](https://agentprime.io/advisories/CVE-2026-33425.md) `CVE-2026-33425` · CVE record: discourse discourse · CVSS 6.9 Medium · Not analysed yet · Published 20 Mar 2026 · Tags: Information disclosure, Broken access control - [PM access granted through invites after access revocation](https://agentprime.io/advisories/CVE-2026-33424.md) `CVE-2026-33424` · CVE record: discourse discourse · CVSS 5.9 Medium · Not analysed yet · Published 20 Mar 2026 · Tags: Broken access control - [Discourse staff can modify any user's group notification level](https://agentprime.io/advisories/CVE-2026-33423.md) `CVE-2026-33423` · CVE record: discourse discourse · CVSS 1.3 Low · Not analysed yet · Published 20 Mar 2026 · Tags: Broken access control - [Discourse exposes ip_address of flagged user](https://agentprime.io/advisories/CVE-2026-33422.md) `CVE-2026-33422` · CVE record: discourse discourse · CVSS 3.5 Low · Not analysed yet · Published 20 Mar 2026 · Tags: Information disclosure - [Discourse's solved topic stream has potential stored XSS in topic title](https://agentprime.io/advisories/CVE-2026-33411.md) `CVE-2026-33411` · CVE record: discourse discourse · CVSS 5.4 Medium · Not analysed yet · Published 20 Mar 2026 · Tags: Cross-site scripting (XSS) - [Discourse user can create Zendesk tickets even when it does not have access to topic](https://agentprime.io/advisories/CVE-2026-33291.md) `CVE-2026-33291` · CVE record: discourse discourse · CVSS 5.1 Medium · Not analysed yet · Published 20 Mar 2026 · Tags: Broken access control - [Discourse has a Hidden Solved topics permission bypass](https://agentprime.io/advisories/CVE-2026-33251.md) `CVE-2026-33251` · CVE record: discourse discourse · CVSS 5.4 Medium · Not analysed yet · Published 20 Mar 2026 · Tags: Broken access control - [Discourse's unscoped status lookups leak restricted metadata](https://agentprime.io/advisories/CVE-2026-32114.md) `CVE-2026-32114` · CVE record: discourse discourse · CVSS 5.3 Medium · Not analysed yet · Published 20 Mar 2026 · Tags: Broken access control - [Discourse: Composer mentions endpoint leaks hidden group membership through PM \`allowed_names\` check](https://agentprime.io/advisories/CVE-2026-31869.md) `CVE-2026-31869` · CVE record: discourse discourse · CVSS 5.3 Medium · Not analysed yet · Published 20 Mar 2026 · Tags: Information disclosure, Broken access control - [Discourse has a poll authorization bypass via post_id array parameter](https://agentprime.io/advisories/CVE-2026-31805.md) `CVE-2026-31805` · CVE record: discourse discourse · CVSS 5.3 Medium · Not analysed yet · Published 20 Mar 2026 · Tags: Broken access control, CWE-20 - [Discourse hasUnauthorized Exposure of Private User Action Types](https://agentprime.io/advisories/CVE-2026-30891.md) `CVE-2026-30891` · CVE record: discourse discourse · CVSS 5.3 Medium · Not analysed yet · Published 20 Mar 2026 · Tags: Information disclosure - [Discourse has Unauthorized Post Data Exposure in discourse-user-notes](https://agentprime.io/advisories/CVE-2026-30889.md) `CVE-2026-30889` · CVE record: discourse discourse · CVSS 5.3 Medium · Not analysed yet · Published 20 Mar 2026 · Tags: Broken access control - [Discourse has moderator privilege escalation via arbitrary post_id in suspend/silence endpoint](https://agentprime.io/advisories/CVE-2026-30888.md) `CVE-2026-30888` · CVE record: discourse discourse · CVSS 2.2 Low · Not analysed yet · Published 20 Mar 2026 · Tags: Privilege escalation - [Discourse has Improper Authorization in "Post Edits" Report For Moderators](https://agentprime.io/advisories/CVE-2026-33408.md) `CVE-2026-33408` · CVE record: discourse discourse · CVSS 2.2 Low · Not analysed yet · Published 19 Mar 2026 · Tags: Broken access control - [Discourse has stored click‑based XSS via Graphviz SVG javascript: links](https://agentprime.io/advisories/CVE-2026-33395.md) `CVE-2026-33395` · CVE record: discourse discourse · CVSS 4.4 Medium · Not analysed yet · Published 19 Mar 2026 · Tags: Cross-site scripting (XSS) - [Discourse leaks PM post edits to moderators](https://agentprime.io/advisories/CVE-2026-33394.md) `CVE-2026-33394` · CVE record: discourse discourse · CVSS 2.7 Low · Not analysed yet · Published 19 Mar 2026 · Tags: Information disclosure - [Discourse fixes loose hostname matching in spam host allowlist](https://agentprime.io/advisories/CVE-2026-33393.md) `CVE-2026-33393` · CVE record: discourse discourse · CVSS 4.3 Medium · Not analysed yet · Published 19 Mar 2026 · Tags: Broken access control - [Discourse filters whisper posts from private-posts feed](https://agentprime.io/advisories/CVE-2026-33355.md) `CVE-2026-33355` · CVE record: discourse discourse · CVSS 6.5 Medium · Not analysed yet · Published 19 Mar 2026 · Tags: Information disclosure - [Discourse hardens chat DM channel creation and expansion](https://agentprime.io/advisories/CVE-2026-33410.md) `CVE-2026-33410` · CVE record: discourse discourse · CVSS 5.4 Medium · Not analysed yet · Published 19 Mar 2026 · Tags: Broken access control - [Discourse prevents hidden profile data leak via user onebox](https://agentprime.io/advisories/CVE-2026-32099.md) `CVE-2026-32099` · CVE record: discourse discourse · CVSS 4.3 Medium · Not analysed yet · Published 19 Mar 2026 · Tags: Information disclosure - [Discourse missing permission check for policy creation in discourse-policy](https://agentprime.io/advisories/CVE-2026-29072.md) `CVE-2026-29072` · CVE record: discourse discourse · CVSS 8.2 High · Not analysed yet · Published 19 Mar 2026 · Tags: Broken access control - [Discourse vulnerable to group membership addition permission bypass via discourse-policy plugin](https://agentprime.io/advisories/CVE-2026-28282.md) `CVE-2026-28282` · CVE record: discourse discourse · CVSS 2.3 Low · Not analysed yet · Published 19 Mar 2026 · Tags: Broken access control - [Discourse discloses restricted post-action counts to non-privileged users](https://agentprime.io/advisories/CVE-2026-27936.md) `CVE-2026-27936` · CVE record: discourse discourse · CVSS 6.9 Medium · Not analysed yet · Published 19 Mar 2026 · Tags: Broken access control - [Discourse leaks private topic metadata to non-authorized users](https://agentprime.io/advisories/CVE-2026-27935.md) `CVE-2026-27935` · CVE record: discourse discourse · CVSS 6.9 Medium · Not analysed yet · Published 19 Mar 2026 · Tags: Information disclosure - [Discourse leaks private topic title and post excerpt via user action API endpoint](https://agentprime.io/advisories/CVE-2026-27934.md) `CVE-2026-27934` · CVE record: discourse discourse · CVSS 8.7 High · Not analysed yet · Published 19 Mar 2026 · Tags: Information disclosure - [Discourse has Stored XSS in AI Triage Automation](https://agentprime.io/advisories/CVE-2026-27740.md) `CVE-2026-27740` · CVE record: discourse discourse · CVSS 5.1 Medium · Not analysed yet · Published 19 Mar 2026 · Tags: Cross-site scripting (XSS) - [Discourse Vulnerable to Stored XSS via Shared AI Conversation Onebox](https://agentprime.io/advisories/CVE-2026-27570.md) `CVE-2026-27570` · CVE record: discourse discourse · CVSS 5.1 Medium · Not analysed yet · Published 19 Mar 2026 · Tags: Cross-site scripting (XSS) - [Discourse has a bypass of official warnings messages by non-staff users](https://agentprime.io/advisories/CVE-2026-27491.md) `CVE-2026-27491` · CVE record: discourse discourse · CVSS 6.9 Medium · Not analysed yet · Published 19 Mar 2026 · Tags: Broken access control - [Discourse has check revision visibility on posts endpoint](https://agentprime.io/advisories/CVE-2026-27454.md) `CVE-2026-27454` · CVE record: discourse discourse · CVSS 5.3 Medium · Not analysed yet · Published 19 Mar 2026 · Tags: Broken access control - [Discourse vulnerable to HTML injection via prohibited iframe URLs](https://agentprime.io/advisories/CVE-2026-27166.md) `CVE-2026-27166` · CVE record: discourse discourse · CVSS 4.1 Medium · Not analysed yet · Published 19 Mar 2026 · Tags: Cross-site scripting (XSS) - [Discourse Vulnerable to Unauthorized Topic Creation in Staff-Only Categories via Topic Timer publish_to_category](https://agentprime.io/advisories/CVE-2026-28227.md) `CVE-2026-28227` · CVE record: discourse discourse · CVSS 1.2 Low · Not analysed yet · Published 26 Feb 2026 · Tags: Broken access control - [Privilege Escalation via Mass Assignment Allows Regular Users to Set Topics as Global Banners](https://agentprime.io/advisories/CVE-2026-28219.md) `CVE-2026-28219` · CVE record: discourse discourse · CVSS 1.3 Low · Not analysed yet · Published 26 Feb 2026 · Tags: Broken access control - [Discourse's Fail-Open Access Control in Data Explorer Plugin Allows Unauthorized SQL Query Execution](https://agentprime.io/advisories/CVE-2026-28218.md) `CVE-2026-28218` · CVE record: discourse discourse · CVSS 5.3 Medium · Not analysed yet · Published 26 Feb 2026 · Tags: Broken access control - [Discourse has XSS when editing a malicious post](https://agentprime.io/advisories/CVE-2026-27154.md) `CVE-2026-27154` · CVE record: discourse discourse · CVSS 1.3 Low · Not analysed yet · Published 26 Feb 2026 · Tags: Cross-site scripting (XSS) - [Discourse doesn't prevent moderators from exporting user Chat DMs](https://agentprime.io/advisories/CVE-2026-27153.md) `CVE-2026-27153` · CVE record: discourse discourse · CVSS 1.3 Low · Not analysed yet · Published 26 Feb 2026 · Tags: Broken access control - [DIscourse has DM communication-preference bypass when adding members](https://agentprime.io/advisories/CVE-2026-27152.md) `CVE-2026-27152` · CVE record: discourse discourse · CVSS 1.3 Low · Not analysed yet · Published 26 Feb 2026 · Tags: Broken access control - [DIscourse doesn't prevent whispers to leak in excerpts](https://agentprime.io/advisories/CVE-2026-27162.md) `CVE-2026-27162` · CVE record: discourse discourse · CVSS 4.9 Medium · Not analysed yet · Published 26 Feb 2026 · Tags: Information disclosure - [Discourse doesn't validate destination topic when moving posts](https://agentprime.io/advisories/CVE-2026-27151.md) `CVE-2026-27151` · CVE record: discourse discourse · CVSS 1.3 Low · Not analysed yet · Published 26 Feb 2026 · Tags: Broken access control - [Discourse doesn't ensure guardian check when creating QueryGroupBookmark](https://agentprime.io/advisories/CVE-2026-27150.md) `CVE-2026-27150` · CVE record: discourse discourse · CVSS 1.3 Low · Not analysed yet · Published 26 Feb 2026 · Tags: Broken access control - [Discourse has SQL injection in PM tag filtering](https://agentprime.io/advisories/CVE-2026-27149.md) `CVE-2026-27149` · CVE record: discourse discourse · CVSS 4.9 Medium · Not analysed yet · Published 26 Feb 2026 · Tags: SQL injection - [Discourse: Poll voters endpoint lacked post visibility checks](https://agentprime.io/advisories/CVE-2026-27021.md) `CVE-2026-27021` · CVE record: discourse discourse · CVSS 6.9 Medium · Not analysed yet · Published 26 Feb 2026 · Tags: Broken access control - [Discourse: TL4 users are able to change status of restricted topics](https://agentprime.io/advisories/CVE-2026-26979.md) `CVE-2026-26979` · CVE record: discourse discourse · CVSS 0.0 None · Not analysed yet · Published 26 Feb 2026 · Tags: Broken access control - [Discourse doesn't scope reviewable notes to user-visible reviewables](https://agentprime.io/advisories/CVE-2026-26973.md) `CVE-2026-26973` · CVE record: discourse discourse · CVSS 4.3 Medium · Not analysed yet · Published 26 Feb 2026 · Tags: Broken access control - [Discourse has IDOR vulnerability in the directory items endpoint](https://agentprime.io/advisories/CVE-2026-26265.md) `CVE-2026-26265` · CVE record: discourse discourse · CVSS 7.5 High · Not analysed yet · Published 26 Feb 2026 · Tags: Broken access control Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .