CVE-2026-114713

The labeled-response module in UnrealIRCd versions 6.0.0 before 6.2.7.1 (specifically versions 3.2 through 6.2.7.0 are noted as affected) fails to escape the IRCv3 "label" message tag when echoing it into replies. This vulnerability allows any user on a network with two or more linked servers to ...