CVE-2022-24976

PoC —

CVSS 3.1

9.1 critical

EPSS

2%p78

Published

Feb 14, 2022 (Feb 14, 2022)

Modified

Jun 17, 2026

Description

Atheme IRC Services before 7.2.12, when used in conjunction with InspIRCd, allows authentication bypass by ending an IRC handshake at a certain point during a challenge-response login sequence.

Vendors: atheme
Products: atheme
Weakness: CWE-287
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news0 stories

No ingested article mentions this CVE yet.