⤷ Title: Discourse Vulnerabilities Let Attackers Hijack Pages for Every Visitor and Read Server Files
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 13 Oct 2026 00:11:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cache Poisoning #Cross_Site Scripting #CVE_2026_55420 #CVE_2026_55674 #Discourse #Forum Security #ImageMagick #SL Cyber
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 13 Oct 2026 00:11:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cache Poisoning #Cross_Site Scripting #CVE_2026_55420 #CVE_2026_55674 #Discourse #Forum Security #ImageMagick #SL Cyber
Daily CyberSecurity
Discourse Vulnerabilities Let Attackers Hijack Pages for Every Visitor and Read Server Files
TL;DR SL Cyber found two Discourse vulnerabilities in a forum platform that powers more than 22,000 communities. One lets an unauthenticated attacker push malicious JavaScript to every anonymous v…