CVE-2026-45780

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, EventSerializer could expose invited group names, sample invitees, and attendance statistics to users who could view the topic but were not entitled to view the private event invitee list. This issue is fixed in versions 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5.

• CWE-200

• https://github.com/discourse/discourse/commit/37969503f20369eb1712b7b88daedcfb4f63f5f1Patch
• https://github.com/discourse/discourse/commit/4d46638041b5f3d1e1f7f6f6f19c1df3bd65a586Patch
• https://github.com/discourse/discourse/commit/6457ab71f36a2d1440fe96af0a2593897844b023Patch
• https://github.com/discourse/discourse/commit/7deb4b6963442569357b41e61febe37594e5e730Patch
• https://github.com/discourse/discourse/releases/tag/v2026.1.5Release Notes
• https://github.com/discourse/discourse/releases/tag/v2026.4.2Release Notes
• https://github.com/discourse/discourse/releases/tag/v2026.5.1Release Notes
• https://github.com/discourse/discourse/releases/tag/v2026.6.0Release Notes
• https://github.com/discourse/discourse/security/advisories/GHSA-22v7-6wgj-g9f7Vendor Advisory

Published

Jul 9, 2026

Last Modified

Jul 14, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-45775Discourse is an open-source discussion platform. From versio…6.8
• CVE-2026-45776OpenXDMoD is an open framework for collecting and analyzing …4.3
• CVE-2026-45777OpenXDMoD is an open framework for collecting and analyzing …9.8
• CVE-2026-45778OpenXDMoD is an open framework for collecting and analyzing …5.4
• CVE-2026-45779OpenXDMoD is an open framework for collecting and analyzing …9.8
• CVE-2026-4578A vulnerability was determined in code-projects Exam Form Su…2.4
• CVE-2026-45781The MCP Registry provides MCP clients with a list of MCP ser…3.5
• CVE-2026-45782Cloud Hypervisor is a Virtual Machine Monitor for Cloud work…8.9
• CVE-2026-45783libp2p is a JavaScript Implementation of libp2p networking s…7.5
• CVE-2026-45784rust-openssl provides OpenSSL bindings for the Rust programm…7.1
• CVE-2026-45785OpenMcdf is a fully .NET / C# library to manipulate Compound…6.2
• CVE-2026-45787electerm is an open-sourced terminal/ssh/sftp/telnet/serialp…9.1