VYPR
← All advisories
Low severity2.7NVD Advisory· Published Feb 26, 2026· Updated Jun 17, 2026

CVE-2026-26979

CVE-2026-26979

Description

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, TL4 users are able to close, archive and pin topics in private categories they don't have access to. Versions 2025.12.2, 2026.1.1, and 2026.2.0 patch the issue. No known workarounds are available.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Discourse (software)/Discourse4 versions
    cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*range: <2025.12.0
    • cpe:2.3:a:discourse:discourse:2026.2.0:*:*:*:latest:*:*:*
    • (no CPE)range: <2025.12.2, <2026.1.1, <2026.2.0
    • (no CPE)range: < 2025.12.2
  • osv-coords
    pkg:bitnami/discourse
    Range: < 2025.12.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.