CVE-2026-55420 | Discourse up to 2026.1.4/2026.4.1/2026.5.0 PDF Processing unrestricted upload

July 9, 2026 Yanac

A vulnerability identified as critical has been detected in Discourse up to 2026.1.4/2026.4.1/2026.5.0. This affects an unknown function of the component PDF Processing. Performing a manipulation results in unrestricted upload.

This vulnerability was named CVE-2026-55420. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More