CVE-2026-104480 - Improper MLS Welcome roster validation in Discord libdave allows unauthorized group membership
CVE ID :CVE-2026-104480 Published : Oct. 2, 2026, 2:17 a.m. | 1 hour, 3 minutes ago Description :Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster contained an unrecognized participant. An attacker in control of the DAVE signaling path (the...