PT-2026-139716
CVE-2026-114713
·
Published
2026-11-07
·
Updated
2026-11-08
Description by
CVSS 3.1
8.6
HighMetricsAV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
UnrealIRCd versions 3.2 through 6.2.7.0
Description
A critical issue allows standard users to execute commands with server or IRCOp authority, enabling unauthorized actions such as KILL and GLINE. Other identified issues include crashes, hangs, Denial of Service (DoS), and a flaw that allows ordinary users to reveal the IP address of other users.
Recommendations
For versions prior to 6.2.7.1, update to version 6.2.7.1.
For UnrealIRCd 6 users, deploy the SPAMFILTER workaround and apply the hot-patch command.
For UnrealIRCd 5 users, upgrade immediately.
Found an issue in the description? Have something to add? Feel free to write us 👾