Vulnerabilities
Discourse CVE-2026-55420 Allows Low-Privilege Users to Read Server Files
A race condition in Discourse’s image upload pipeline enables arbitrary file access for Trust Level 0 users via crafted uploads.
Searchlight Cyber
Everything Threat Times has reported about Searchlight Cyber: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Discourse Image Pipeline Flaws Allow File Read and Cache Poisoning
Researchers disclosed two vulnerabilities in Discourse’s image handling that enable local file access and script execution, with patches released before publication.
Cyber Attacks
Searchlight Cyber Discloses GoBalance Flaw Allowing .onion Address Hijacking
A vulnerability in the GoBalance tool enables attackers to recover secret keys from public data and hijack dark-web site addresses.