CVE-2026-32615 in Discourse
Сводка (Английский)
Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, category group moderators could perform privileged actions on topics inside private categories they did not have read access to. This issue has been patched in versions 2026.1.3, 2026.2.2, and 2026.3.0.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Ответственный
GitHub_M
Резервировать
12.03.2026
Раскрытие
31.03.2026
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 354472 | Discourse эскалация привилегий | 285 | Не определено | Официальное исправление | CVE-2026-32615 |