Attackers exploit UnrealIRCd flaw enabling server-level command injection; CISA adds it to KEV

Tier B · Patch this week – Put it in the sprint

Who’s exposed: Servers running UnrealIRCd

Tier B because: Exploited in the wild OR public exploit

Reach

Attack

Damage

Fix

Exploited in the wild · Full takeover

What to do

Check whether any of your servers run UnrealIRCd and identify their versions.
Review the CISA KEV entry and the vendor guidance for remediation steps.

The Brief

CISA added a high-severity UnrealIRCd flaw to its Known Exploited Vulnerabilities catalog on Friday.
The flaw affects UnrealIRCd, an open-source IRC server.
Reports of active exploitation prompted the KEV addition, and the flaw enables server-level command injection.

Why it matters

If you run UnrealIRCd, attackers are actively exploiting a flaw that allows command injection at the server level, so an unpatched server may be compromised.

The checklist behind the tier

Checklist · 3 of 10 yes

Yes	Hits tech teams	Judgment: UnrealIRCd is server software that ops teams deploy and run.
No	Core infrastructure	Judgment: a single niche IRC server product, not shared core infrastructure.
No	Popular tool	Judgment: IRC server with a small user base, not mainstream developer tech.
Yes	Exploited in the wild	The Hacker News: CISA added the flaw to KEV following reports of active exploitation.
No	Public exploit	No source mentions published exploit code or a proof-of-concept.
No	Remote, no login	Sources do not state that exploitation needs no credentials.
Yes	Full takeover	The Hacker News: flaw enables server-level command injection, implying code execution on the server.
No	Secrets exposed	No source reports stolen credentials, keys, configs or data.
No	Supply chain	No source reports a compromised package, update or build pipeline.
No	No fix yet	Sources do not say whether a patched version is available.

Source

Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection ↗ The Hacker News · 1h ago

First seen 1h ago · 1 source · Full story page · How tiers are decided