CVE-2026-53961

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, the AWS SES bounce webhook at POST /webhooks/aws verified that SNS messages were signed by Amazon but did not bind them to trusted TopicArn values, allowing any AWS account holder to publish validly signed forged Bounce notifications that revoke a targeted user email. This issue is fixed in versions 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5.

• CWE-345

• https://github.com/discourse/discourse/commit/3a3d315a85ef3c6aabfc7e7bb38702059784f06bPatch
• https://github.com/discourse/discourse/commit/61f12e13aa1b760f81d5ff60f12e3a7e77434b94Patch
• https://github.com/discourse/discourse/commit/958f0cd831d65a49ec75f05343ca2c167679f0eaPatch
• https://github.com/discourse/discourse/commit/aea35190791261bab258ebab05da279e78cdd0e6Patch
• https://github.com/discourse/discourse/releases/tag/v2026.1.5Release Notes
• https://github.com/discourse/discourse/releases/tag/v2026.4.2Release Notes
• https://github.com/discourse/discourse/releases/tag/v2026.5.1Release Notes
• https://github.com/discourse/discourse/releases/tag/v2026.6.0Release Notes
• https://github.com/discourse/discourse/security/advisories/GHSA-8f9m-v436-wr3xVendor Advisory

Published

Jul 9, 2026

Last Modified

Jul 14, 2026

Status

Analyzed

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-53948Ghost is a Node.js content management system. From 6.19.4 un…5.4
• CVE-2026-53949Ghost is a Node.js content management system. From 5.46.1 un…5.3
• CVE-2026-5395The Fluent Forms – Customizable Contact Forms, Survey, Quiz,…8.2
• CVE-2026-53950@tryghost/activitypub is Ghost’s social/federation client ap…7.5
• CVE-2026-53951Copier is a library and CLI app for rendering project templa…8.8
• CVE-2026-5396The Fluent Forms plugin for WordPress is vulnerable to Autho…8.2
• CVE-2026-53962Discourse is an open-source discussion platform. Prior to 20…5.4
• CVE-2026-53963Discourse is an open-source discussion platform. Prior to 20…9
• CVE-2026-5397It has been identified that a vulnerability (CWE-427) exists…7.8
• CVE-2026-53975OpenChamber 1.11.7 contains an unauthenticated remote code e…9.8
• CVE-2026-53976OpenChamber 1.11.7 contains a path traversal vulnerability i…9.3
• CVE-2026-53977OpenChamber 1.11.7 contains an authentication bypass vulnera…8.7