CVE record · 2 sources
CVE-2026-114713
KEV · due 16 Nov 2026CVSS 8.6UnrealIRCd Improper Neutralization of Delimiters Vulnerability
- Vendor
- UnrealIRCd
- Product
- UnrealIRCd
- CVSS v3.1
- 8.6 AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
- EPSS
- 0.003 (p23)
- CISA KEV
- added 13 Nov 2026, due 16 Nov 2026 (3d)
- Weakness
- CWE-140
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
UnrealIRCd Improper Neutralization of Delimiters Vulnerability
UnrealIRCd UnrealIRCd contains an improper neutralization of delimiters vulnerability that allows any user on a network with two or more linked servers to inject server-to-server commands that are executed with server authority.