UnrealIRCd 6.2.7.1 released with hot-patch for label tag escaping bug (CVE-2026-114713)
The escaping bug allows injecting arbitrary commands into IRC server traffic using the label message tag.
4 stories, newest first · one card per story
The escaping bug allows injecting arbitrary commands into IRC server traffic using the label message tag.
UnrealIRCd 6.2.7 hot-patch fixes a minor MITM command injection in STARTTLS S2S upgrade, flagged as LLM-reported.
WeeChat 4.10.1 fixes six security vulnerabilities, including WSA-2026-15 allowing DCC-received files to be written outside the configured directory.

Unit 42 uncovered Eleethub, a Perl-based Bitcoin mining botnet using a crafted rootkit and libprocesshider to evade detection, still under development with few infections.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views