CISA Warns of Active Exploitation for High-Severity UnrealIRCd Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity flaw in UnrealIRCd, an open-source IRC server, to its Known Exploited Vulnerabilities catalog. Tracked as CVE-2026-114713, this vulnerability allows arbitrary command execution with server privileges due to improper neutralization of delimiters. Exploitation began shortly after a hotfix was released on November 7, 2026, posing a significant risk to affected systems.