Security · High impactFan score 45 · Tier B
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection
The Hacker News ·
The Brief
- CISA added a high-severity UnrealIRCd flaw to its Known Exploited Vulnerabilities catalog on Friday.
- The flaw affects UnrealIRCd, an open-source IRC server.
- Reports of active exploitation prompted the KEV addition, and the flaw enables server-level command injection.
Why it matters
If you run UnrealIRCd, attackers are actively exploiting a flaw that allows command injection at the server level, so an unpatched server may be compromised.
Who’s affected
- Operators of UnrealIRCd servers
What to do
- Check whether any of your servers run UnrealIRCd and identify their versions.
- Review the CISA KEV entry and the vendor guidance for remediation steps.
- #security
- #unrealircd
- #irc
- #command-injection
- #cisa
- #vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a high-severity security flaw impacting UnrealIRCd, an open-source Internet Relay Chat (IRC) server, to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation…