Is CVE-2026-55420 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-55420?

CVE-2026-55420 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-55420

Description

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, under certain non-default configurations, processing of PDF uploads could be exploited to obtain RCE on the server. This issue is patched in 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5.