THREAT OPS › Threat News › [NVD] CVE-2026-55704 (MEDIUM 4.3) — Discourse is an open-source discussion platform. Prior o 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, users who were allowed to view a group’s activity, but were not permitted to see shared drafts, could still receive shared-draft entries through the group posts and group mentions
[NVD] CVE-2026-55704 (MEDIUM 4.3) — Discourse is an open-source discussion platform. Prior o 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, users who were allowed to view a group’s activity, but were not permitted to see shared drafts, could still receive shared-draft entries through the group posts and group mentions
CVE-2026-55704 CVSS: 4.3 MEDIUM Published: 2026-08-17T16:16:59.057
Discourse is an open-source discussion platform. Prior o 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, users who were allowed to view a group’s activity, but were not permitted to see shared drafts, could still receive shared-draft entries through the group posts and group mentions endpoints. This could disclose shared-draft topic t
Indicators of compromise
- CVE-2026-55704cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-55704