Just want to check if Discourse is affected by today’s leak of CVE-2026-109618 and CVE-2026-109619 Several forum sites are going into temporary read-only mode following this disclosure until they are patched, is any action required for our forums that are hosted by Discourse?

Discourse doesn’t use php, so is unaffected by these issues. No action is required from self-hosters, or from our hosted customers.

Betroffen von Discourse? CVE-2026-109618

Produktunterstützung

david (David Taylor) 21. Oktober 2026 um 14:42 2

Discourse verwendet kein PHP und ist daher von diesen Problemen nicht betroffen. Weder für Selbstbetreiber noch für unsere gehosteten Kunden sind Maßnahmen erforderlich.

Thema		Antworten	Aufrufe
June 2026 monthly release Announcements release-notes	3	583	2. Juli 2026
Discourse Vulnerability [False Positive] Product Support	2	1541	10. Juni 2019
Discourse-patreon vulnerability? Community Building	3	758	27. Oktober 2022
Discourse CVE RSS Feed Product Support	3	499	27. Oktober 2021
Unable to find discourse version 2.9.0.beta6 Product Support	3	728	4. Juli 2022

Betroffen von Discourse? CVE-2026-109618

Verwandte Themen