CVE-2026-114713

The labeled-response module in UnrealIRCd versions 6.0.0 before 6.2.7.1 (specifically versions 3.2 through 6.2.7.0 are noted as affected) fails to escape the IRCv3 "label" message tag when echoing it into replies. This vulnerability allows any user on a network with two or more linked servers to ...

CVE-2026-114713

The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing it into replies, which allows any user on a network with two or more linked servers to inject server-to-server commands that are executed with server authority...

CVE-2026-114713: UnrealIRCd: The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when…

The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing it into replies, which allows any user on a network with two or more linked servers to inject server-to-server commands that are executed with server authority...