CyberRota Analysis
AI-GeneratedThe vulnerability affects the Discourse open-source discussion platform, allowing remote code execution (RCE) on the server through the exploitation of PDF uploads under specific non-default configurations. Organizations using affected versions prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5 should prioritize applying the patches to mitigate this high-severity risk. Immediate action is essential to protect against potential unauthorized access and control over the server.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, under certain non-default configurations, processing of PDF uploads could be exploited to obtain RCE on the server. This issue is patched in 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5.
Related CVEs
Other vulnerabilities affecting the same vendor(s)