CVE-2026-59828

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, post revisions that should be hidden from regular users could be leaked through visible diffs on adjacent revisions serialized by PostRevisionSerializer. This issue is fixed in versions 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5.

• CWE-200

• https://github.com/discourse/discourse/commit/1f26c1163ce87a2abbd1d01780ab1b5fb16e75f6Patch
• https://github.com/discourse/discourse/commit/8b773332b0f937dfcd894ed56d56fc5a81578d9dPatch
• https://github.com/discourse/discourse/commit/8d36da1b68c906592abde3f2e94d505cdf097435Patch
• https://github.com/discourse/discourse/commit/d58988d46bb1019bfa8b8330ae81a1a134e08511Patch
• https://github.com/discourse/discourse/releases/tag/v2026.1.5Release Notes
• https://github.com/discourse/discourse/releases/tag/v2026.4.2Release Notes
• https://github.com/discourse/discourse/releases/tag/v2026.5.1Release Notes
• https://github.com/discourse/discourse/releases/tag/v2026.6.0Release Notes
• https://github.com/discourse/discourse/security/advisories/GHSA-q456-4f8q-42vxVendor Advisory

Published

Jul 9, 2026

Last Modified

Jul 13, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-59821LiteLLM is a proxy server (AI Gateway) to call LLM APIs in O…7.2
• CVE-2026-59822LiteLLM is a proxy server (AI Gateway) to call LLM APIs in O…8.2
• CVE-2026-59823LiteLLM is a proxy server (AI Gateway) to call LLM APIs in O…5.3
• CVE-2026-59825Mastodon is a free, open-source social network server based …7.4
• CVE-2026-59826Metabase is an open-source business intelligence and embedde…9.1
• CVE-2026-59827Metabase is an open-source business intelligence and embedde…8.8
• CVE-2026-59829Discourse is an open-source discussion platform. Prior to 20…4.3
• CVE-2026-5983A vulnerability was determined in D-Link DIR-605L 2.13B01. T…8.8
• CVE-2026-59830Discourse is an open-source discussion platform. Prior to 20…5.4
• CVE-2026-59831GitHub CLI (gh) is GitHub’s official command line tool. From…4.4
• CVE-2026-59832SiYuan is an open-source personal knowledge management syste…7.7
• CVE-2026-59833SiYuan is an open-source personal knowledge management syste…8.6