# UnrealIRCd 6.2.7.1 released & hot-patch (CVE-2026-114713)

Source: [Open Source Security](https://seclists.org/oss-sec/2026/q4/576) · 2026-11-08 · Security
Page: https://themorning.dev/story/unrealircd-6-2-7-1-released-hot-patch-cve-2026-114713-38b0487cb4f32252
Kind: security · Impact: medium

## In brief

- UnrealIRCd 6.2.7.1 security release and hot-patch was published on 7 November 2026.
- CVE-2026-114713 is an escaping bug in UnrealIRCd's implementation of the IRCv3 "label" message tag.
- The CVE entry was published on 8 November 2026.

## Why it matters

Operators of UnrealIRCd servers should update, since the bug concerns how the server handles a user-supplied IRCv3 message tag.

## What to do

- Upgrade to UnrealIRCd 6.2.7.1 or apply the hot-patch

## Versions

- UnrealIRCd 6.2.7.1

## CVEs

- CVE-2026-114713

## Timeline

- 2026-11-07: UnrealIRCd 6.2.7.1 security release and hot-patch published
- 2026-11-08: CVE-2026-114713 entry published

## Coverage

- [UnrealIRCd 6.2.7.1 released & hot-patch (CVE-2026-114713)](https://seclists.org/oss-sec/2026/q4/576) — Open Source Security, 2026-11-08

Tags: unrealircd, security, irc, ircv3, cve

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev