PT-2026-139716

CVE-2026-114713

·

Published

2026-11-07

·

Updated

2026-11-08

Description by

CVSS 3.1
8.6
High
MetricsAV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions UnrealIRCd versions 3.2 through 6.2.7.0
Description A critical issue allows standard users to execute commands with server or IRCOp authority, enabling unauthorized actions such as KILL and GLINE. Other identified issues include crashes, hangs, Denial of Service (DoS), and a flaw that allows ordinary users to reveal the IP address of other users.
Recommendations For versions prior to 6.2.7.1, update to version 6.2.7.1. For UnrealIRCd 6 users, deploy the SPAMFILTER workaround and apply the hot-patch command. For UnrealIRCd 5 users, upgrade immediately.
Exploitability
Fix
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾