Auth bypass in Discourse

CVE-2026-33291

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, moderators can create Zendesk tickets for topics they do not have access to view. This affects all forums that use the Zendesk pl…

Vulnerability class: Broken Access Control

EPSS: 0.000 (4.3th percentile) — read the EPSS interpretation.