Just want to check if Discourse is affected by today’s leak of CVE-2026-109618 and CVE-2026-109619 Several forum sites are going into temporary read-only mode following this disclosure until they are patched, is any action required for our forums that are hosted by Discourse?

Discourse doesn’t use php, so is unaffected by these issues. No action is required from self-hosters, or from our hosted customers.

Discourse concerné ? CVE-2026-109618

Assistance produit

david (David Taylor) Octobre 21, 2026, 2:42 2

Discourse n’utilise pas PHP, il est donc insensible à ces problèmes. Aucune action n’est requise de la part des auto-hébergeurs ni de nos clients hébergés.

Sujet		Réponses	Vues
June 2026 monthly release Announcements release-notes	3	583	Juillet 2, 2026
Discourse Vulnerability [False Positive] Product Support	2	1541	Juin 10, 2019
Discourse-patreon vulnerability? Community Building	3	758	Octobre 27, 2022
Discourse CVE RSS Feed Product Support	3	499	Octobre 27, 2021
Unable to find discourse version 2.9.0.beta6 Product Support	3	728	Juillet 4, 2022

Discourse concerné ? CVE-2026-109618

Sujets connexes