Two Discourse vulnerabilities, CVE-2026-55674 and CVE-2026-55420, enable cache poisoning XSS and server file reads. Patch to the fixed releases now. Related Posts: SAP Security Patch Day October 2026 Fixes CVSS 10 Cloud SDK Flaw and Three More Critical Bugs IBM Patches Three Critical Flaws in IBM i, Db2 Mirror and Maximo AI Service Critical Ghostscript Vulnerability CVE-2026-39919 Turns Uploaded PDFs Into Remote Code Execution The post Discourse Vulnerabilities Let Attackers Hijack Pages for Every Visitor and Read Server Files appeared first on Daily CyberSecurity.