SecurityOnlineDo Son
Discord to make public server messages searchable on the web
Part of the CVE-2026-116690 story · since 28 Oct
- Wed 28 Oct, 18:00 UTC. SecurityOnline, first report. Attackers exploit MLflow file read flaw as PoC code emerges.
- Wed 28 Oct, 18:01 UTC. SecurityOnline. Discord to make public server messages searchable on the web. This article, 2nd of 2.
Discord has announced an upcoming expansion to its public indexing, with public messages from large discoverable servers set to surface on the open web and be indexed by major search engines such as Google. The rollout is planned to begin in mid-December 2026, with an initial phase that will see AI-generated summaries of channel conversations produced from 16 November before full messages appear verbatim in search results.
The company says usernames and profile avatars will be redacted to protect identities, and emphasises that server privacy remains in the hands of administrators. The news site notes that the initiative targets discoverable servers—public communities that can be joined without an invite, typically with at least 1,000 members and eight weeks of operation—and estimates around 63,000 such servers meet the baseline criteria.
User and server controls are described as robust levers to manage exposure. Administrators can disable web view generation or block crawlers to protect private discussions, and individual users can opt out by adjusting Data and Privacy settings to hide their messages from online discoverable channels. The article cites a Discord community update that prioritises discoverability for open hubs, while stressing that opt-out options exist for those seeking to limit their exposure.
Separately, the page lists several active CVEs monitored by the site, including CVE-2026-116690 and CVE-2026-101767 as well as several older entries, illustrating ongoing exploit activity across products and platforms.
How the story developed
2 articles from 1 outlet since 28 Oct. Still developing; the latest report was 1 hour ago. This was the 2nd report, within the hour.
- Wed 28 Oct, 18:00 UTC. SecurityOnline, first report. Attackers exploit MLflow file read flaw as PoC code emerges.
- Wed 28 Oct, 18:01 UTC. SecurityOnline. Discord to make public server messages searchable on the web. This article, 2nd of 2.
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
Show all 2 articles as a listHide the list
- Wed 28 OctDay 02
- Attackers exploit MLflow file read flaw as PoC code emerges18:00 · SecurityOnline · First report
- Discord to make public server messages searchable on the web18:01 · SecurityOnline · This article, 2nd of 2