CVE-2026-45780 | Discourse up to 2026.1.4/2026.4.1/2026.5.0 EventSerializer deserialization

A vulnerability classified as problematic has been found in Discourse up to 2026.1.4/2026.4.1/2026.5.0. This affects an unknown function of the component EventSerializer. This manipulation causes deserialization.

This vulnerability is handled as CVE-2026-45780. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More