UnrealIRCd Server Command Injection Flaw Added to CISA KEV Catalog

Cybersecurity and Infrastructure Security Agency (CISA) to place a significant security weakness affecting UnrealIRCd, an open-source Internet Relay Chat (IRC) server, into its Known Exploited Vulnerabilities (KEV) catalog this Friday. This flaw, designated as CVE-2026-114713 and possessing a CVSS score of 8.6, stems from an issue related to the inadequate sanitization of delimiters.

The specific nature of the vulnerability is improper neutralization of delimiters.

This inclusion signals a critical operational risk within infrastructure components, highlighting the persistent threat landscape facing open-source platform services.

Earlier coverage

• Adapting to AI penetration testing orchestrators: The Modern Security Model Nov 13
• TSMC confirms employee data breach tied to cloud service provider Nov 13
• Ransomware attack on Belarusian cloud firm disrupts businesses for days Nov 13