CVE-2026-47195

Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, the purge and slowmode commands check only guild-level permissions on the invoking member. They do not check the member’s effective permissions in the channel where the command is run. A user denied channel-level moderation permissions can still delete messages or change slowmode through the bot. This issue has been patched in version 1.1.6.

• CWE-863

• https://github.com/duck-organization/questbot/releases/tag/questbot-v1.1.6
• https://github.com/duck-organization/questbot/security/advisories/GHSA-2wf8-554w-hrj9
• https://github.com/duck-organization/questbot/security/advisories/GHSA-2wf8-554w-hrj9

Published

Jun 12, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-4719Incorrect boundary conditions in the Graphics: Text componen…7.5
• CVE-2026-47190IPAM is the IP address Manager for Cluster API Provider Meta…4.4
• CVE-2026-47191kas is a setup tool for bitbake based projects. Prior to ver…2.1
• CVE-2026-47192kas is a setup tool for bitbake based projects. Starting in …2.1
• CVE-2026-47193OpenProject is open-source, web-based project management sof…7.5
• CVE-2026-47194Frappe is a full-stack web application framework. Prior to 1…8.6
• CVE-2026-47196Quest Bot is an opensource Discord Bot. Prior to version 1.1…8.4
• CVE-2026-47197Quest Bot is an opensource Discord Bot. Prior to version 1.1…7.2
• CVE-2026-47198Paymenter is a free and open-source webshop solution for man…8.5
• CVE-2026-47199Frappe is a full-stack web application framework. Prior to 1…2.3
• CVE-2026-4720Memory safety bugs present in Firefox ESR 140.8, Thunderbird…9.8
• CVE-2026-47200Nuxt is an open-source web development framework for Vue.js.…5.3