Beveiligingsadvies

CVE-2026-90668

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-13 02:00:54
Laatst bijgewerkt 2026-09-14 18:13:44
Toegewezen door mitre
CVSS-score 8.7
Status PUBLISHED

Beschrijving

The webserver in UnrealIRCd 6.0.5 through 6.2.6 before 6.2.7 does not limit the number of HTTP request headers, which allows remote attackers to cause a denial of service (memory consumption and unresponsive server) via an HTTP request with an unlimited number of headers, if a websocket or JSON-RPC listener is enabled (disabled by default).