CVE-2026-55704

Discourse is an open-source discussion platform. Prior o 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, users who were allowed to view a group’s activity, but were not permitted to see shared drafts, could still receive shared-draft entries through the group posts and group mentions endpoints. This could disclose shared-draft topic titles and post excerpt/content, resulting in an information disclosure of unpublished draft material. This issue is fixed in versions 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0.

• CWE-862

• https://github.com/discourse/discourse/security/advisories/GHSA-fxw4-38v9-76v8

Published

Aug 17, 2026

Last Modified

Sep 18, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-55698pnpm is a package manager. Prior to 10.34.2 and 11.5.3, pnpm…8.8
• CVE-2026-55699pnpm is a package manager. Prior to 10.34.2 and 11.5.3, Mani…6.5
• CVE-2026-5570A vulnerability was determined in Technostrobe HI-LED-WR120-…9.8
• CVE-2026-55700pnpm is a package manager. From 11.3.0 until 11.5.3, `pnpm s…7.1
• CVE-2026-55701The OpenTelemetry Collector Contrib repository contains comp…6.9
• CVE-2026-55703Snipe-IT is an IT asset/license management system. Prior to …4.3
• CVE-2026-55706sppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 07…8.3
• CVE-2026-55707In OpenStack Neutron before 28.0.2, the subnetpool onboardin…7.1
• CVE-2026-55708In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the …3.1
• CVE-2026-5571A vulnerability was identified in Technostrobe HI-LED-WR120-…7.5
• CVE-2026-55717In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, whe…5.9
• CVE-2026-5572A security flaw has been discovered in Technostrobe HI-LED-W…4.3