UnrealIRCd 6.2.7.1 released & hot-patch (CVE-2026-114713)

The Brief

UnrealIRCd 6.2.7.1 security release and hot-patch was published on 7 November 2026.
CVE-2026-114713 is an escaping bug in UnrealIRCd's implementation of the IRCv3 "label" message tag.
The CVE entry was published on 8 November 2026.

Why it matters

Operators of UnrealIRCd servers should update, since the bug concerns how the server handles a user-supplied IRCv3 message tag.

Who’s affected

UnrealIRCd server operators

What to do

Upgrade to UnrealIRCd 6.2.7.1 or apply the hot-patch

UnrealIRCd 6.2.7.1
CVE-2026-114713
#unrealircd
#security
#irc
#ircv3
#cve

Posted by Bram Matthys on Nov 08 Last Saturday, 7-Nov-2026, I put out a security release and hot-patch for UnrealIRCd. The CVE entry CVE-2026-114713 has been published now. This is an escaping bug in UnrealIRCd's implementation of the IRCv3 "label" message tag. Any user can…

Read the full story at seclists.org ↗

Timeline

Nov 7
UnrealIRCd 6.2.7.1 security release and hot-patch published
Nov 8
CVE-2026-114713 entry published
Nov 8 · 9:09 AM
Open Source Security
UnrealIRCd 6.2.7.1 released & hot-patch (CVE-2026-114713)