CVE-2026-55420

HighCVSS 8.1/10Last modified Jul 14, 2026

Description

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, under certain non-default configurations, processing of PDF uploads could be exploited to obtain RCE on the server. This issue is patched in 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Vendor	Product	Versions
discourse	discourse	>= 2026.5.0-latest, < 2026.5.1; >= 2026.4.0-latest, < 2026.4.2; >= 2026.1.0-latest, < 2026.1.5

References

https://github.com/discourse/discourse/commit/ca5a7e06167561928556afa2f237d67e459c6914Patch
https://github.com/discourse/discourse/releases/tag/v2026.1.5Release Notes
https://github.com/discourse/discourse/releases/tag/v2026.4.2Release Notes
https://github.com/discourse/discourse/releases/tag/v2026.5.1Release Notes
https://github.com/discourse/discourse/releases/tag/v2026.6.0Release Notes
https://github.com/discourse/discourse/security/advisories/GHSA-7wq5-jgww-5rw3Mitigation, Vendor Advisory

Timeline

Published: Jul 9, 2026
Last modified: Jul 14, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-554216.8Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 00b7c3c, the endpoint accepts user-sup CVE-2026-554224.6conda-forge is a GitHub organization containing repositories of conda recipes. In commits 85748ad2368a and prior, two React components rende CVE-2026-554236.1Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.7.0, the logout button does not clear the session.CVE-2026-554245.4Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, a topic "featured link" was not suffic CVE-2026-554255.0Graylog is a free and open log management platform. From 7.1.0 until 7.1.4 and 7.2.0-alpha.2, the System Catalog entity titles endpoint in g CVE-2026-554267.8linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations, and Linuxfabrik Monitoring Plug CVE-2026-554278.3Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2,CVE-2026-554288.2Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2,CVE-2026-554298.7Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2,CVE-2026-55436.3A vulnerability was identified in PHPGurukul User Registration & Login and User Management System 3.3. The affected element is an unknown fu CVE-2026-554306.8Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2,CVE-2026-554316.1Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2,