By weakness (CWE)

CWE-804: related vulnerabilities

CVEs classified under CWE-804. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

• CVE-2026-49953MEDIUM 6.5

  Discuz! X5.0 contains a weakness in its CAPTCHA (the image-based puzzle that proves you're human) that allows attackers to bypass it entirely. The vulnerability affects builds released between March 20, 2026 and June 10, 2026. An attacker can collect samples of the challenge images, train a machine learning model to recognize the patterns, and then automatically solve them. This bypasses protections that should prevent automated attacks on login pages, registration forms, and other sensitive functions. Because the attack requires no authentication and no user interaction, any exposed Discuz! instance running the affected versions is at immediate risk.