Improper Neutralization of Delimiters Vulnerability
Exploited in the wild. CISA added it to its Known Exploited Vulnerabilities list on 13 Nov 2026.
0.51%
Reading the vendor advisory
Fix it in your code
Each opens with a short prompt that points at Global Hack Map's public runbook for CVE-2026-114713. Nothing runs until you send it.
The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing it into replies, which allows any user on a network with two or more linked servers to inject server-to-server commands that are executed with server authority.
You are affected if
The fix