CVE-2026-59828

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, post revisions that should be hidden from regular users could be leaked through visible diffs on adjacent revisions serialized by PostRevisionSerializer. This issue is fixed in versions 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5.

• CWE-200

• https://github.com/discourse/discourse/commit/1f26c1163ce87a2abbd1d01780ab1b5fb16e75f6Patch
• https://github.com/discourse/discourse/commit/8b773332b0f937dfcd894ed56d56fc5a81578d9dPatch
• https://github.com/discourse/discourse/commit/8d36da1b68c906592abde3f2e94d505cdf097435Patch
• https://github.com/discourse/discourse/commit/d58988d46bb1019bfa8b8330ae81a1a134e08511Patch
• https://github.com/discourse/discourse/releases/tag/v2026.1.5Release Notes
• https://github.com/discourse/discourse/releases/tag/v2026.4.2Release Notes
• https://github.com/discourse/discourse/releases/tag/v2026.5.1Release Notes
• https://github.com/discourse/discourse/releases/tag/v2026.6.0Release Notes
• https://github.com/discourse/discourse/security/advisories/GHSA-q456-4f8q-42vxVendor Advisory

Published

Jul 9, 2026

Last Modified

Jul 13, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-5982A vulnerability was found in D-Link DIR-605L 2.13B01. This v…8.8
• CVE-2026-59820LiteLLM is a proxy server (AI Gateway) to call LLM APIs in O…6.5
• CVE-2026-59821LiteLLM is a proxy server (AI Gateway) to call LLM APIs in O…7.2
• CVE-2026-59822LiteLLM is a proxy server (AI Gateway) to call LLM APIs in O…8.2
• CVE-2026-59826Metabase is an open-source business intelligence and embedde…9.1
• CVE-2026-59827Metabase is an open-source business intelligence and embedde…8.8
• CVE-2026-5983A vulnerability was determined in D-Link DIR-605L 2.13B01. T…8.8
• CVE-2026-59831GitHub CLI (gh) is GitHub’s official command line tool. From…4.4
• CVE-2026-59832SiYuan is an open-source personal knowledge management syste…7.7
• CVE-2026-59833SiYuan is an open-source personal knowledge management syste…8.6
• CVE-2026-59834SiYuan is an open-source personal knowledge management syste…7.5
• CVE-2026-59835A exposure of resource to wrong sphere vulnerability in Fort…8.6