Discord CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Discord CVE published 2026-01-22

CVE-2026-24332

CVE-2026-24332 is a medium-severity vulnerability in Discord's WebSocket API service that allows gathering information about whether a user's client state is Invisible. The vulnerability was published on 2026-01-22T08:16:00.857Z and last modified on 2026-09-13T00:17:06.233Z. This issue arises because the WebSocket API response includes users in the presences array with a status of 'offline', even when the [truncated]