Connected evidence
Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.
UnrealIRCd Improper Neutralization of Delimiters Vulnerability
Lead record- Why these records are connected
- Records explicitly naming the same CVE identifier.
- Connection key
cve:CVE-2026-114713- Public snapshot refreshed
- today 20:10 UTC
- Distinct source events
- 2
- Source records represented
- 2
Current snapshot membership is shown here. Source histories and cited revisions remain on each record. Future source targets are labelled separately from observed changes. Browse connections.
Evidence in chronological order
- Sun 8 Nov · Dated source evidence · Newly collected advisory The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing it into replies, which allows any user on a network with two or more linked servers to inject server-to-server command…CVE-2026-114713 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Newly collected advisory; observed by ChangeIntel, not the original publication date.
- Fri 13 Nov · Dated source evidence · New CISA KEV listing observed UnrealIRCd Improper Neutralization of Delimiters VulnerabilityCVE-2026-114713 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.CISA lists exploitation in the wild; assess the source's affected products.