An actively exploited high-severity vulnerability tracked as CVE-2026-114713 impacts UnrealIRCd versions 6.0.0 through 6.2.7.0.
The flaw involves improper neutralization of delimiters in the labeled-response module, enabling command execution.
Project maintainers released version 6.2.7.1 to address the issue.
The issue affects versions of the program from 6.0.0 to 6.2.7.0 and is due to a flaw in the way it handles certain messages. In networks with connected computers, this vulnerability could allow any user to execute commands on the system with elevated privileges.
The program released an update on November 7, 2026, after identifying issues with the help of artificial intelligence. However, attempts to exploit the problem were recorded soon after, which led US authorities to officially add the issue to a list of dangerous security vulnerabilities that are actively being exploited.
Project leader Bram Matthys described the problem as the most critical issue identified in the program in the last 15 years and confirmed that they are attacking it online.
↳
READ ALSO
HACKS.GR / RELATED
Vulnerabilities & Security Updates
PostgreSQL fixes 52 security issues, including a 22-year-old vulnerability
↗
The relevant US agencies have until November 16, 2026, to implement the necessary corrections.
>Stay connected with Hacks.gr
Set us as a preferred source on Google and find us on social media.
Preferred source
↗
end of article
Top comments (0)