Security Advisory

CVE-2026-55420

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-09 17:54:07
Last updated 2026-07-14 01:08:46
Assigner GitHub_M
CVSS score 7.5
State PUBLISHED

Description

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, under certain non-default configurations, processing of PDF uploads could be exploited to obtain RCE on the server. This issue is patched in 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5.