Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Red Discord Bot Dashboard is an easy-to-use interactive web dashboard to control your Redbot. In Red Discord Bot before version 0.1.7a an RCE exploit has been discovered. This exploit allows Discord users with specially crafted Server names and Usernames/Nicknames to inject code into the webserver front-end code. By abusing this exploit, it's possible to perform destructive actions and/or access sensitive information. This high severity exploit has been fixed on version 0.1.7a. There are no workarounds, bot owners must upgrade their relevant packages (Dashboard module and Dashboard webserver) in order to patch this issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
5 versions affected across 1 product
discordメンテナのみなさまー CVE-2025-26604 CVE-2026-32890 CVE-2025-53943 CVE-2024-21663 CVE-2020-26249 botとかモジュールに上記セキュリティ勧告出ていますよ お使いのbotに上記のリスクが含まれてないかご確認をー
Post summary
The message lists several CVEs relevant to Discord bots/modules and urges maintainers to verify if their bots are affected, but it does not provide PoC, exploitation details, active use evidence, or patch information.
5 of 5 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | cogboard | red-dashboard | 0.1.2 | - | - |
| App | cogboard | red-dashboard | 0.1.3 | - | - |
| App | cogboard | red-dashboard | 0.1.4 | - | - |
| App | cogboard | red-dashboard | 0.1.5 | - | - |
| App | cogboard | red-dashboard | 0.1.6 | - | - |