CVE-2026-53961

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, the AWS SES bounce webhook at POST /webhooks/aws verified that SNS messages were signed by Amazon but did not bind them to trusted TopicArn values, allowing any AWS account holder to publish validly signed forged Bounce notifications that revoke a targeted user email. This issue is fixed in versions 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5.

• CWE-345

• https://github.com/discourse/discourse/commit/3a3d315a85ef3c6aabfc7e7bb38702059784f06bPatch
• https://github.com/discourse/discourse/commit/61f12e13aa1b760f81d5ff60f12e3a7e77434b94Patch
• https://github.com/discourse/discourse/commit/958f0cd831d65a49ec75f05343ca2c167679f0eaPatch
• https://github.com/discourse/discourse/commit/aea35190791261bab258ebab05da279e78cdd0e6Patch
• https://github.com/discourse/discourse/releases/tag/v2026.1.5Release Notes
• https://github.com/discourse/discourse/releases/tag/v2026.4.2Release Notes
• https://github.com/discourse/discourse/releases/tag/v2026.5.1Release Notes
• https://github.com/discourse/discourse/releases/tag/v2026.6.0Release Notes
• https://github.com/discourse/discourse/security/advisories/GHSA-8f9m-v436-wr3xVendor Advisory

Published

Jul 9, 2026

Last Modified

Jul 14, 2026

Status

Analyzed

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-53956Rattler is a library that provides common functionality used…5.4
• CVE-2026-53957Contentful MCP Server is a Model Context Protocol server for…7.7
• CVE-2026-539584gaBoards is a boards system for realtime project management…7.6
• CVE-2026-539594gaBoards is a boards system for realtime project management…6.5
• CVE-2026-5396The Fluent Forms plugin for WordPress is vulnerable to Autho…8.2
• CVE-2026-53960Discourse is an open-source discussion platform. Prior to 20…5.3
• CVE-2026-53962Discourse is an open-source discussion platform. Prior to 20…5.4
• CVE-2026-53963Discourse is an open-source discussion platform. Prior to 20…9
• CVE-2026-53965The MCP PHP SDK (Composer package mcp/sdk) is the official M…6.9
• CVE-2026-53966XWiki Platform is a generic wiki platform. From 13.4-rc-1 un…7.1
• CVE-2026-53968Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-53969Rejected reason: This CVE ID has been rejected or withdrawn …