{"schema_version":1,"title":"Discourse vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 68 vulnerabilities in Discourse: 10 in the last 7 days and 38 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-91121, was published on 24 September 2026.","url":"https://junglewise.ai/threats/technologies/discourse","json_url":"https://junglewise.ai/threats/technologies/discourse.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/discourse","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":8,"all_time":68,"critical":1,"exploited":0,"last_7_days":10,"last_30_days":10,"last_90_days":38,"last_365_days":68},"latest":[{"cve":"CVE-2026-91121","cvss":5,"epss":0.0026,"slug":"cve-2026-91121-discourse-is-an-open-source-discussion-platform-prior-to-2026-1-8","title":"Discourse HTML injection in chat message excerpts","severity":"medium","exploited":false,"published_at":"2026-09-24T18:19:06.583+00:00","url":"https://junglewise.ai/threats/cve-2026-91121-discourse-is-an-open-source-discussion-platform-prior-to-2026-1-8"},{"cve":"CVE-2026-91120","cvss":5.4,"epss":0.002,"slug":"cve-2026-91120-discourse-is-an-open-source-discussion-platform-prior-to-2026-1-8","title":"Discourse HTML injection in lazy video embed notifications","severity":"medium","exploited":false,"published_at":"2026-09-24T18:19:06.397+00:00","url":"https://junglewise.ai/threats/cve-2026-91120-discourse-is-an-open-source-discussion-platform-prior-to-2026-1-8"},{"cve":"CVE-2026-91119","cvss":6.4,"epss":0.002,"slug":"cve-2026-91119-discourse-is-an-open-source-discussion-platform-prior-to-2026-1-8","title":"Discourse stored HTML injection in activity log components","severity":"medium","exploited":false,"published_at":"2026-09-24T18:19:06.22+00:00","url":"https://junglewise.ai/threats/cve-2026-91119-discourse-is-an-open-source-discussion-platform-prior-to-2026-1-8"},{"cve":"CVE-2026-91134","cvss":5.4,"epss":0.0022,"slug":"cve-2026-91134-discourse-is-an-open-source-discussion-platform-prior-to-2026-1-8","title":"Discourse post sanitizer iframe bypass via encoded userinfo","severity":"medium","exploited":false,"published_at":"2026-09-24T17:17:09.08+00:00","url":"https://junglewise.ai/threats/cve-2026-91134-discourse-is-an-open-source-discussion-platform-prior-to-2026-1-8"},{"cve":"CVE-2026-91133","cvss":6.5,"epss":0.0029,"slug":"cve-2026-91133-discourse-is-an-open-source-discussion-platform-prior-to-2026-1-8","title":"Discourse information disclosure in upload path queries","severity":"medium","exploited":false,"published_at":"2026-09-24T17:17:08.893+00:00","url":"https://junglewise.ai/threats/cve-2026-91133-discourse-is-an-open-source-discussion-platform-prior-to-2026-1-8"},{"cve":"CVE-2026-91132","cvss":4.3,"epss":0.0014,"slug":"cve-2026-91132-discourse-is-an-open-source-discussion-platform-prior-to-2026-1-8","title":"Discourse wildcard iframe origin allowlist bypass","severity":"medium","exploited":false,"published_at":"2026-09-24T17:17:08.723+00:00","url":"https://junglewise.ai/threats/cve-2026-91132-discourse-is-an-open-source-discussion-platform-prior-to-2026-1-8"},{"cve":"CVE-2026-91123","cvss":7.2,"epss":0.0029,"slug":"cve-2026-91123-discourse-is-an-open-source-discussion-platform-prior-to-2026-1-8","title":"Discourse iframe src path traversal via backslash bypass","severity":"high","exploited":false,"published_at":"2026-09-24T17:17:08.56+00:00","url":"https://junglewise.ai/threats/cve-2026-91123-discourse-is-an-open-source-discussion-platform-prior-to-2026-1-8"},{"cve":"CVE-2026-91122","cvss":8.7,"epss":0.0026,"slug":"cve-2026-91122-discourse-is-an-open-source-discussion-platform-prior-to-2026-1-8","title":"Discourse stored XSS in video placeholder component","severity":"high","exploited":false,"published_at":"2026-09-24T17:17:08.393+00:00","url":"https://junglewise.ai/threats/cve-2026-91122-discourse-is-an-open-source-discussion-platform-prior-to-2026-1-8"},{"cve":"CVE-2026-84302","cvss":4.2,"epss":0.0024,"slug":"cve-2026-84302-discourse-is-an-open-source-discussion-platform-prior-to-2026-1-6","title":"Discourse AI access control bypass in private message reviewables","severity":"medium","exploited":false,"published_at":"2026-09-24T17:17:06.793+00:00","url":"https://junglewise.ai/threats/cve-2026-84302-discourse-is-an-open-source-discussion-platform-prior-to-2026-1-6"},{"cve":"CVE-2026-59830","cvss":5.4,"epss":0.0029,"slug":"cve-2026-59830-discourse-is-an-open-source-discussion-platform-prior-to-2026-7-0","title":"Discourse stored XSS via unescaped display name","severity":"medium","exploited":false,"published_at":"2026-09-21T22:16:57.353+00:00","url":"https://junglewise.ai/threats/cve-2026-59830-discourse-is-an-open-source-discussion-platform-prior-to-2026-7-0"},{"cve":"CVE-2026-59829","cvss":4.3,"epss":0.0038,"slug":"cve-2026-59829-discourse-information-disclosure-in-category-group-moderation","title":"Discourse information disclosure in category group moderation review queue","severity":"medium","exploited":false,"published_at":"2026-08-17T16:17:01.687+00:00","url":"https://junglewise.ai/threats/cve-2026-59829-discourse-information-disclosure-in-category-group-moderation"},{"cve":"CVE-2026-55704","cvss":4.3,"epss":0.0027,"slug":"cve-2026-55704-discourse-shared-draft-information-disclosure-in-group","title":"Discourse shared-draft information disclosure in group serialization","severity":"medium","exploited":false,"published_at":"2026-08-17T16:16:59.057+00:00","url":"https://junglewise.ai/threats/cve-2026-55704-discourse-shared-draft-information-disclosure-in-group"},{"cve":"CVE-2026-55674","cvss":9.3,"epss":0.0059,"slug":"cve-2026-55674-discourse-stored-xss-via-color-scheme-cookies","title":"Discourse stored XSS via color scheme cookies","severity":"critical","exploited":false,"published_at":"2026-08-17T16:16:58.917+00:00","url":"https://junglewise.ai/threats/cve-2026-55674-discourse-stored-xss-via-color-scheme-cookies"},{"cve":"CVE-2026-53960","cvss":5.3,"epss":0.0031,"slug":"cve-2026-53960-discourse-hidden-first-post-content-leakage-in-q-a-json-ld-schema","title":"Discourse hidden first-post content leakage in Q&A JSON-LD schema","severity":"medium","exploited":false,"published_at":"2026-08-17T16:16:58.423+00:00","url":"https://junglewise.ai/threats/cve-2026-53960-discourse-hidden-first-post-content-leakage-in-q-a-json-ld-schema"},{"cve":"CVE-2026-72732","cvss":4.3,"epss":0.0034,"slug":"cve-2026-72732-discourse-templates-endpoint-information-disclosure-via-tag","title":"Discourse Templates endpoint information disclosure via tag filtering bypass","severity":"medium","exploited":false,"published_at":"2026-08-10T18:18:51.53+00:00","url":"https://junglewise.ai/threats/cve-2026-72732-discourse-templates-endpoint-information-disclosure-via-tag"},{"cve":"CVE-2026-72731","cvss":7.1,"epss":0.004,"slug":"cve-2026-72731-discourse-sql-injection-in-data-explorer-parameterized-queries","title":"Discourse SQL injection in Data Explorer parameterized queries","severity":"high","exploited":false,"published_at":"2026-08-10T17:17:37.663+00:00","url":"https://junglewise.ai/threats/cve-2026-72731-discourse-sql-injection-in-data-explorer-parameterized-queries"},{"cve":"CVE-2026-72730","cvss":8.7,"epss":0.0043,"slug":"cve-2026-72730-discourse-stored-xss-in-rich-text-editor-chat-transcript-username","title":"Discourse stored XSS in Rich Text Editor chat transcript username","severity":"high","exploited":false,"published_at":"2026-08-10T17:17:37.507+00:00","url":"https://junglewise.ai/threats/cve-2026-72730-discourse-stored-xss-in-rich-text-editor-chat-transcript-username"},{"cve":"CVE-2026-72729","epss":0.0048,"slug":"cve-2026-72729-discourse-discourse-local-dates-html-injection","title":"Discourse discourse-local-dates HTML injection","severity":"info","exploited":false,"published_at":"2026-08-10T17:17:37.337+00:00","url":"https://junglewise.ai/threats/cve-2026-72729-discourse-discourse-local-dates-html-injection"},{"cve":"CVE-2026-72728","cvss":6.3,"epss":0.0031,"slug":"cve-2026-72728-discourse-onebox-allowlist-bypass","title":"Discourse Onebox allowlist bypass","severity":"medium","exploited":false,"published_at":"2026-08-10T17:17:37.013+00:00","url":"https://junglewise.ai/threats/cve-2026-72728-discourse-onebox-allowlist-bypass"},{"cve":"CVE-2026-72727","cvss":4.8,"epss":0.004,"slug":"cve-2026-72727-discourse-stored-xss-in-moderation-review-queue","title":"Discourse stored XSS in moderation review queue","severity":"info","exploited":false,"published_at":"2026-08-10T17:17:36.833+00:00","url":"https://junglewise.ai/threats/cve-2026-72727-discourse-stored-xss-in-moderation-review-queue"},{"cve":"CVE-2026-72726","cvss":6.5,"epss":0.0045,"slug":"cve-2026-72726-discourse-ai-bot-reply-stream-information-disclosure","title":"Discourse AI bot reply stream information disclosure","severity":"medium","exploited":false,"published_at":"2026-08-10T16:19:50.097+00:00","url":"https://junglewise.ai/threats/cve-2026-72726-discourse-ai-bot-reply-stream-information-disclosure"},{"cve":"CVE-2026-72725","cvss":5.4,"epss":0.003,"slug":"cve-2026-72725-discourse-stored-xss-in-staff-action-logs","title":"Discourse stored XSS in staff action logs","severity":"medium","exploited":false,"published_at":"2026-08-10T16:19:49.957+00:00","url":"https://junglewise.ai/threats/cve-2026-72725-discourse-stored-xss-in-staff-action-logs"},{"cve":"CVE-2026-72724","cvss":4.3,"epss":0.0063,"slug":"cve-2026-72724-discourse-private-chat-message-disclosure-via-onebox","title":"Discourse private chat message disclosure via onebox","severity":"medium","exploited":false,"published_at":"2026-08-10T16:19:49.81+00:00","url":"https://junglewise.ai/threats/cve-2026-72724-discourse-private-chat-message-disclosure-via-onebox"},{"cve":"CVE-2026-72723","cvss":5.3,"epss":0.0053,"slug":"cve-2026-72723-discourse-information-disclosure-in-anonymous-navigation-menu","title":"Discourse information disclosure in anonymous navigation menu serialization","severity":"medium","exploited":false,"published_at":"2026-08-10T16:19:49.667+00:00","url":"https://junglewise.ai/threats/cve-2026-72723-discourse-information-disclosure-in-anonymous-navigation-menu"},{"cve":"CVE-2026-72722","cvss":4.3,"epss":0.0044,"slug":"cve-2026-72722-discourse-information-disclosure-via-duplicate-lookup-in","title":"Discourse information disclosure via duplicate lookup in TopicLink","severity":"medium","exploited":false,"published_at":"2026-08-10T16:19:49.52+00:00","url":"https://junglewise.ai/threats/cve-2026-72722-discourse-information-disclosure-via-duplicate-lookup-in"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":11},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":13},{"week":"2026-08-17","critical":1,"exploited":0,"vulnerabilities":4},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":10}],"related":[],"technology":{"hub":true,"name":"Discourse","slug":"discourse","vendor":{"name":"Discourse","slug":"discourse","url":"https://junglewise.ai/threats/vendors/discourse"},"aliases":[],"category":"web-application","homepage":"https://www.discourse.org/","repo_url":"https://github.com/discourse/discourse","description":"Discourse is an open-source Internet forum and mailing list management software application.","url":"https://junglewise.ai/threats/technologies/discourse"},"most_severe":[{"cve":"CVE-2026-55674","cvss":9.3,"epss":0.0059,"slug":"cve-2026-55674-discourse-stored-xss-via-color-scheme-cookies","title":"Discourse stored XSS via color scheme cookies","severity":"critical","exploited":false,"published_at":"2026-08-17T16:16:58.917+00:00","url":"https://junglewise.ai/threats/cve-2026-55674-discourse-stored-xss-via-color-scheme-cookies"},{"cve":"CVE-2026-72730","cvss":8.7,"epss":0.0043,"slug":"cve-2026-72730-discourse-stored-xss-in-rich-text-editor-chat-transcript-username","title":"Discourse stored XSS in Rich Text Editor chat transcript username","severity":"high","exploited":false,"published_at":"2026-08-10T17:17:37.507+00:00","url":"https://junglewise.ai/threats/cve-2026-72730-discourse-stored-xss-in-rich-text-editor-chat-transcript-username"},{"cve":"CVE-2026-91122","cvss":8.7,"epss":0.0026,"slug":"cve-2026-91122-discourse-is-an-open-source-discussion-platform-prior-to-2026-1-8","title":"Discourse stored XSS in video placeholder component","severity":"high","exploited":false,"published_at":"2026-09-24T17:17:08.393+00:00","url":"https://junglewise.ai/threats/cve-2026-91122-discourse-is-an-open-source-discussion-platform-prior-to-2026-1-8"},{"cve":"CVE-2026-44787","cvss":8.2,"slug":"cve-2026-44787-discourse-privilege-escalation-in-signup-flow","title":"Discourse privilege escalation in signup flow","severity":"high","exploited":false,"published_at":"2026-07-09T22:17:04.607+00:00","url":"https://junglewise.ai/threats/cve-2026-44787-discourse-privilege-escalation-in-signup-flow"},{"cve":"CVE-2026-44786","cvss":7.5,"epss":0.0004,"slug":"cve-2026-44786-discourse-information-disclosure-in-public-chat-channels","title":"Discourse information disclosure in public chat channels","severity":"high","exploited":false,"published_at":"2026-06-12T21:16:22.313+00:00","url":"https://junglewise.ai/threats/cve-2026-44786-discourse-information-disclosure-in-public-chat-channels"},{"cve":"CVE-2026-55420","cvss":7.5,"slug":"cve-2026-55420-discourse-rce-via-pdf-upload-processing","title":"Discourse RCE via PDF upload processing","severity":"high","exploited":false,"published_at":"2026-07-09T18:16:54.44+00:00","url":"https://junglewise.ai/threats/cve-2026-55420-discourse-rce-via-pdf-upload-processing"},{"cve":"CVE-2026-53963","cvss":7.3,"slug":"cve-2026-53963-discourse-stored-xss-in-2fa-delete-confirmation-dialog","title":"Discourse stored XSS in 2FA delete confirmation dialog","severity":"high","exploited":false,"published_at":"2026-07-09T22:17:05.763+00:00","url":"https://junglewise.ai/threats/cve-2026-53963-discourse-stored-xss-in-2fa-delete-confirmation-dialog"},{"cve":"CVE-2026-91123","cvss":7.2,"epss":0.0029,"slug":"cve-2026-91123-discourse-is-an-open-source-discussion-platform-prior-to-2026-1-8","title":"Discourse iframe src path traversal via backslash bypass","severity":"high","exploited":false,"published_at":"2026-09-24T17:17:08.56+00:00","url":"https://junglewise.ai/threats/cve-2026-91123-discourse-is-an-open-source-discussion-platform-prior-to-2026-1-8"},{"cve":"CVE-2026-72731","cvss":7.1,"epss":0.004,"slug":"cve-2026-72731-discourse-sql-injection-in-data-explorer-parameterized-queries","title":"Discourse SQL injection in Data Explorer parameterized queries","severity":"high","exploited":false,"published_at":"2026-08-10T17:17:37.663+00:00","url":"https://junglewise.ai/threats/cve-2026-72731-discourse-sql-injection-in-data-explorer-parameterized-queries"},{"cve":"CVE-2026-45775","cvss":6.8,"epss":0.0004,"slug":"cve-2026-45775-discourse-path-traversal-in-multisite-backup-handling","title":"Discourse path traversal in multisite backup handling","severity":"medium","exploited":false,"published_at":"2026-06-12T21:16:23.267+00:00","url":"https://junglewise.ai/threats/cve-2026-45775-discourse-path-traversal-in-multisite-backup-handling"}],"generated_at":"2026-09-26T12:07:00.15149+00:00"}