Skip to content
CVE-2026-114713 in UnrealIRCd Under Active Exploitation

CVE-2026-114713 in UnrealIRCd Under Active Exploitation

First seen 9 Nov 2026, 23:09 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 9, 2026 at 23:09 UTC
  • •CVE-2026-114713 allows command injection on linked IRC servers.
  • •UnrealIRCd version 6.2.7.1 released to patch this critical vulnerability.
  • •Active exploitation of the vulnerability has been confirmed.

UnrealIRCd has released version 6.2.7.1 to address CVE-2026-114713, a vulnerability that allows unauthenticated attackers on networks with multiple linked IRC servers to inject and execute arbitrary server-to-server commands. This flaw, which affects versions prior to 6.2.7.1, has been confirmed to be actively exploited. The vulnerability arises from the labeled-response module failing to escape the IRCv3 'label' message tag, enabling attackers to manipulate server configurations and network integrity. The Centre for Cybersecurity Belgium has issued an urgent advisory for organizations to patch vulnerable systems immediately and enhance monitoring for suspicious activities. Historical compromises may still exist even after patching. Organizations are advised to report any incidents promptly.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 8h ago How this analysis works

Timeline

2026-11-08
CVE-2026-114713 published
The vulnerability was disclosed, allowing command injection on UnrealIRCd networks with multiple linked servers.
Sploitus
2026-11-09
UnrealIRCd 6.2.7.1 released
A new version and hot-patch were released to fix CVE-2026-114713 and other security issues.
Ccb.Belgium.Be

More articles in this cluster (5)

Following this threat?

Track CVE-2026-114713 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 4

Common questions

Which versions of UnrealIRCd are affected?
UnrealIRCd versions prior to 6.2.7.1 are affected by CVE-2026-114713.
Is there evidence of exploitation?
Yes, the vulnerability is confirmed to be actively exploited in the wild.
What actions should organizations take?
Organizations should immediately apply the patch to version 6.2.7.1 and enhance monitoring for suspicious activities.