CVE-2026-57447Medium· 4.3▾ SunlitDiscourse Doc Categories is a plugin for organizing Discourse topics as documentation. Prior to the verified source fix, the doc category index refresh resolves linked titles for private messages or restricted category topics without enf…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 23.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Discourse Doc Categories is a plugin for organizing Discourse topics as documentation. Prior to the verified source fix, the doc category index refresh resolves linked titles for private messages or restricted category topics without enforcing the viewer's authorization. A user who can edit the index topic can use this behavior to learn titles that the user is not authorized to view, although the advisory does not establish access to topic contents. This vulnerability is addressed by commit b15d4de02ad29d7c9525346afee51fef4a2c605a.
discourse-doc-categories < b15d4de02ad29d7c9525346afee51fef4a2c605aRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-91157High· 7.5Discourse is an open-source discussion platform
CVE-2026-27481Medium· 5.3Discourse is an open-source discussion platform
CVE-2026-32618Medium· 4.3Discourse is an open-source discussion platform
CVE-2026-32143Medium· 6.5Discourse is an open-source discussion platform
CVE-2026-55103High· 8.6Discourse ActivityPub adds ActivityPub support to Discourse
CVE-2026-91159High· 7.7Discourse is an open-source discussion platform