discourse vulnerabilities

Recent CVEs affecting discourse products. 11 tracked.

discourse has 11 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 11. Most recent: 2026-06-12. Highest priority: CVE-2026-44786 (score 36/100).

• CVE-2026-44780 MEDIUM 4.3 UPGRADE Discourse is an open-source discussion platform
• CVE-2026-44782 MEDIUM 4.3 UPGRADE Discourse is an open-source discussion platform
• CVE-2026-44783 MEDIUM 5.4 UPGRADE Discourse is an open-source discussion platform
• CVE-2026-44784 MEDIUM 6.5 UPGRADE Discourse is an open-source discussion platform
• CVE-2026-44785 MEDIUM 4.3 UPGRADE Discourse is an open-source discussion platform
• CVE-2026-44786 HIGH 7.5 UPGRADE Discourse is an open-source discussion platform
• CVE-2026-45085 MEDIUM 5.3 UPGRADE Discourse is an open-source discussion platform
• CVE-2026-45775 MEDIUM 6.8 UPGRADE Discourse is an open-source discussion platform
• CVE-2026-47263 MEDIUM 4.3 UPGRADE Discourse is an open-source discussion platform
• CVE-2026-47264 MEDIUM 5.3 UPGRADE Discourse is an open-source discussion platform
• CVE-2026-44779 MEDIUM 4.3 UPGRADE Discourse is an open-source discussion platform

FAQ

How do I fix discourse vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is discourse being exploited right now?

None of the tracked discourse CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which discourse CVE should I patch first?

CVE-2026-44786 currently ranks highest (36/100): Discourse is an open-source discussion platform.

Products

• discourse

RSS feed for discourse · ← Back to latest CVEs