Summary

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a high-severity security flaw impacting UnrealIRCd, an open-source Internet Relay Chat (IRC) server, to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The vulnerability, tracked as CVE-2026-114713 (CVSS score: 8.6), is a case of improper neutralization of delimiters

For more information, read the full story at the original source: The Hacker News ↗

Vulnerabilities in this story

• CVE-2026-114713 KEV · fix by 2026-11-16 UnrealIRCd UnrealIRCd EPSS 0.5% 8.6High

Also reported by

• Security Affairs: U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog ↗
• Network World: The firewall becomes the foothold: Attackers turn Check Point gateways against customers ↗
• BleepingComputer: Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiper ↗
• SecurityWeek: PHP2Shell Exploited in Destructive Check Point Gateway Attacks ↗