HIGHCVSS v3.1 8.6Actively exploited · CISA KEV since 2026-11-13Vulnerability
CVE-2026-114713
UnrealIRCd UnrealIRCd contains an improper neutralization of delimiters vulnerability that allows any user on a network with two or more linked servers to inject server-to-server commands that are executed with server authority.
Properties
- Vulnerability name
- UnrealIRCd Improper Neutralization of Delimiters Vulnerability
- Epss score
- 0.00302
- Last seen
- 2026-11-13T05:03:13+00:00
- Due date
- 2026-11-16
- Exploited euvd since
- 2026-11-13T00:00:00+00:00
- Date added
- 2026-11-13
- Source url
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119377
- Score
- 8.6
- Euvd base score version
- 3.1
- Euvd vendor
- UnrealIRCd
- First seen by Signal
- 2026-11-08T06:55:21+00:00
- Euvd base score
- 8.6
- Vendor project
- UnrealIRCd
- Content hash
- b20aec1755b2dfcfe46ede8fa026849dd069e1a7b822a25ae69666d638419240
- Published at
- 2026-11-08T03:16:33.410
- Euvd updated
- 2026-11-13T05:03:13+00:00
- Last modified
- 2026-11-13T05:17:52.333
- Euvd epss pct
- 0.3
- Epss percentile
- 0.23297
- Licence
- ENISA legal notice 1.2: reproduction authorised provided the source is acknowledged
Related Entities (2)
HAS_WEAKNESS (1)
INVOLVES (1)
Related research
- What CISA KEV means · and how to use the list
- CVE, CVSS, EPSS and KEV explained
Explore deeper with Ninja Signal's threat intelligence graph