Is Discourse 2025.11.2 patched?
Current stable (2026.5.0): 74/100
2025.11.2 has 3 open critical-or-high vulnerabilities. Run 2026.1.4 or later to clear them. See what 2026.1.4 fixes →
Summary iPlain-English security status for Discourse 2025.11.2, built from its CVEs, active-exploitation data, end-of-life date and latest release.
Discourse 2025.11.2 is part of the 2025.11 release line. 29 known vulnerabilities affect it. The minimum safe version is 2026.1.4 — upgrade to it or later to clear the open critical/high issues. The 2025.11 line reached end-of-life on 2026-01-28, so it no longer receives security patches. The latest supported Discourse release is 2026.5.0.
Known issues affecting 2025.11.2
Exploited first, then by exploitation probability.
CVE-2026-45775 MEDIUM EPSS 0% → fixed in 2026.4.1 CVE-2026-27021 MEDIUM EPSS 0% → fixed in 2026.1.1 CVE-2026-44786 HIGH EPSS 0% → fixed in 2026.4.1 CVE-2026-26077 MEDIUM EPSS 0% → fixed in 2026.1.1 CVE-2026-26265 HIGH EPSS 0% → fixed in 2026.1.1 CVE-2026-44784 MEDIUM EPSS 0% → fixed in 2026.4.1 CVE-2026-27162 MEDIUM EPSS 0% → fixed in 2026.1.1 CVE-2026-27149 MEDIUM EPSS 0% → fixed in 2026.1.1 CVE-2026-26078 HIGH EPSS 0% → fixed in 2026.1.1 CVE-2026-44779 MEDIUM EPSS 0% → fixed in 2026.4.1 CVE-2026-47264 MEDIUM EPSS 0% → fixed in 2026.4.1 CVE-2026-28219 MEDIUM EPSS 0% → fixed in 2026.1.1 CVE-2026-45085 MEDIUM EPSS 0% → fixed in 2026.4.1 CVE-2026-27166 MEDIUM EPSS 0% → fixed in 2026.3.0 CVE-2026-28227 LOW EPSS 0% → fixed in 2026.1.1 CVE-2026-47263 MEDIUM EPSS 0% → fixed in 2026.4.1 CVE-2026-44780 MEDIUM EPSS 0% → fixed in 2026.4.1 CVE-2026-44782 MEDIUM EPSS 0% → fixed in 2026.4.1 CVE-2026-44785 MEDIUM EPSS 0% → fixed in 2026.4.1 CVE-2026-26979 LOW EPSS 0% → fixed in 2026.1.1Other Discourse versions
Check another release line of Discourse.
Frequently asked
Is Discourse 2025.11.2 patched?
Discourse 2025.11.2 is end-of-life and no longer receives security patches. Move to 2026.5.0.
What version should I upgrade Discourse 2025.11.2 to?
Upgrade Discourse 2025.11.2 to at least 2026.1.4 to clear its 3 open critical-or-high vulnerabilities.
When does Discourse 2025.11 reach end-of-life?
Discourse 2025.11 reached end-of-life on 2026-01-28 and no longer receives security patches.
What is the latest version of Discourse?
The latest supported Discourse release is 2026.5.0.
Is Discourse 2025.11.2 still receiving security updates?
No — Discourse 2025.11.2 is on the 2025.11 line, which reached end-of-life on 2026-01-28 and no longer receives security updates. Upgrade to 2026.5.0 or later to stay supported.
Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Discourse's official advisory before you patch or upgrade — Discourse official site ↗