NewsThe Hacker News
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection
Linked advisories
- CVE-2026-114713UnrealIRCd UnrealIRCd — UnrealIRCd Improper Neutralization of Delimiters Vulnerability
- CVE-2026-114713The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing it into replies, which allows any u…
- CVE-2026-114713UnrealIRCd: Sicherheitslücke
- CVE-2026-114713UnrealIRCd before 6.2.7.1: any normal user can run commands with server/IRCOp authority (critical CVE-2026-114713) plus 8 more fixes
Affected vendors and products
More on UnrealIRCd
Other advisories
- CriticalCVE-2026-114713UnrealIRCd: Sicherheitslücke
- CriticalCVE-2026-114713UnrealIRCd: Sicherheitslücke
- CriticalCVE-2026-114713The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing it into replies, which allows any u…
- CriticalCVE-2026-114713UnrealIRCd before 6.2.7.1: any normal user can run commands with server/IRCOp authority (critical CVE-2026-114713) plus 8 more fixes
- HighCVE-2026-90668UnrealIRCd: Ressourcenzuweisung ohne Begrenzung
- HighCVE-2026-90668Der Webserver in UnrealIRCd 6.
- HighCVE-2026-90668The webserver in UnrealIRCd 6.0.5 through 6.2.6 before 6.2.7 does not limit the number of HTTP request headers, which allows remote attackers to cause a deni…
- HighCVE-2023-50784UnrealIRCd: Pufferüberlauf
Source: https://thehackernews.com/2026/11/attackers-exploit-unrealircd-flaw-that.html
ID