Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection

CISA has added a high-severity UnrealIRCd flaw, CVE-2026-114713 (CVSS 8.6), to its Known Exploited Vulnerabilities catalog following reports of active exploitation. The flaw, an improper neutralization of delimiters in the open-source IRC server software, enables server-level command injection.