← Back to Vulnerability Reports CVE Intelligence

CVE-2026-114713

UnrealIRCd• In the wild In CISA KEV

What is CVE-2026-114713?

UnrealIRCd UnrealIRCd contains an improper neutralization of delimiters vulnerability that allows any user on a network with two or more linked servers to inject server-to-server commands that are executed with server authority.

CVSSawaiting NVD

Exploitation In the wild In CISA KEV

EPSS<1% · P23

Triage statusActive Exploit

ActionPatch immediately

Timeline

2026-11-13Added to the CISA Known Exploited Vulnerabilities (KEV) catalog
2026-11-14First covered in a defend.network daily briefing
2026-11-16CISA federal remediation deadline (BOD 26-04)

CISA Known Exploited Vulnerability

UnrealIRCd Improper Neutralization of Delimiters Vulnerability

Added to KEV2026-11-13

Federal patch deadline2026-11-16

Known ransomware useUnknown

Affected product

UnrealIRCd

Remediation Steps

CISA's KEV entry for this CVE (added 2026-11-13) sets a remediation deadline of 2026-11-16 for U.S. federal agencies.

References

Referenced in our briefings & reports

Vulnerability Priority Report – Week 2 of November 2026 (November 9 – 15)
Check Point zero-day exploited in wiper attacks; North Korea FaceStealer steals $400M crypto (2026-11-14)

Browse all tracked CVEs in the defend.network CVE database →

🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.