Attackers exploit UnrealIRCd flaw enabling server-level command injectionNew
CVE-2026-114713 in UnrealIRCd 6.0.0 before 6.2.7.1 lets linked-network users inject server commands; US agencies must patch by November 16.
78
CVE-2026-114713 in UnrealIRCd 6.0.0 before 6.2.7.1 lets linked-network users inject server commands; US agencies must patch by November 16.
Federal agencies must apply vendor mitigations by November 16, 2026, or discontinue use if none exist.
The escaping bug allows injecting arbitrary commands into IRC server traffic using the label message tag.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 1.1K readers · 1.3K views · 248 reads · all time 195K views