GHSA-237f-p9h6-wq4rHighCVSS 8.6
The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label"...
🔗 CVE IDs covered (1)
📋 Description
The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing it into replies, which allows any user on a network with two or more linked servers to inject server-to-server commands that are executed with server authority.
🔗 References (7)
- https://nvd.nist.gov/vuln/detail/CVE-2026-114713
- https://forums.unrealircd.org/viewtopic.php?t=9487
- https://www.unrealircd.org
- https://www.unrealircd.org/index/news
- http://www.openwall.com/lists/oss-security/2026/11/08/1
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-114713
- https://github.com/advisories/GHSA-237f-p9h6-wq4r