Log in Start free

Discord

Products

ProductCVEsExploitedLatest
Client1–Jan 23, 2026
libdave1–Oct 2, 2026
WebSocket API service1–Jan 22, 2026

Exploited and recent CVEs

  • CVE-2026-104480 Critical 9.4 Improper MLS Welcome roster validation in Discord libdave allows unauthorized group membership 0.4%
  • CVE-2026-0776 High 7.3 Discord Client Uncontrolled Search Path Element Local Privilege Escalation Vulnerability 0.4%
  • CVE-2026-24332 Medium 4.3 Discord through 2026-01-16 allows gathering information about whether a user's client state is Invisible (and not actually offline) because the response to a WebSocket API request includes the user in 0.3%