UnrealIRCd delimiter flaw CVE-2026-114713 lets users inject server commands

An actively exploited flaw in UnrealIRCd's labeled-response module lets any user on a multi-server IRC network inject server-to-server commands. CISA has added it to KEV. Versions before 6.2.7.1 are affected.

November 14, 2026

High 7.8KEVCVE-2026-123039

Check Point Gaia OS DynamicCLI flaw lets local users run commands as root (CVE-2026-123039)

A permissions flaw in the Gaia OS DynamicCLI daemon lets an authenticated local user run commands as root on Check Point Quantum…

November 14, 2026

Critical 9.8CVE-2026-78162

Apache Camel camel-hazelcast deserialization flaw allows RCE (CVE-2026-78162)

A critical (CVSS 9.8) deserialization flaw in Apache Camel's camel-hazelcast component can allow remote code execution. Fixes are in 4.18.5, 4.22.1 and…

November 14, 2026

Critical 9.9CVE-2026-127073

OpsTree BuildPiper flaws let low-privilege users take over Kubernetes clusters

Two critical CVSS 9.9 flaws in OpsTree BuildPiper before 2.7.0 let authenticated project or deploy users gain cluster-admin rights or mount a…

November 13, 2026

Latest vulnerabilities

All vulnerabilities →

Critical CVSS 10.0

Knowledge Hub

All guides →

UnrealIRCd delimiter flaw CVE-2026-114713 lets users inject server commands

Check Point Gaia OS DynamicCLI flaw lets local users run commands as root (CVE-2026-123039)

Apache Camel camel-hazelcast deserialization flaw allows RCE (CVE-2026-78162)

OpsTree BuildPiper flaws let low-privilege users take over Kubernetes clusters

Latest vulnerabilities

MongoDB Server replication use-after-free can lead to RCE (CVE-2026-118383)

Barracuda Email Security Gateway auth bypass CVE-2026-116606 exploited in the wild

CISA Flags Active Exploitation of Two Critical N-able N-central Flaws

WinRAR Zero-Day Actively Exploited

Actively Exploited PaperCut NG/MF CSRF Flaw Added to CISA’s KEV Catalog

Patch Now! Critical Flaw Found in Palo Alto Firewalls

Knowledge Hub

Understanding Cyber Security Risk in Financial Institutions

Troubleshooting Common Wazuh Problems #1

OVHcloud Mitigates Record 840 Million PPS DDoS Attack Leveraging MikroTik Routers