High severity7.5NVD Advisory· Published Sep 13, 2026· Updated Sep 22, 2026
CVE-2026-90668
CVE-2026-90668
Description
The webserver in UnrealIRCd 6.0.5 through 6.2.6 before 6.2.7 does not limit the number of HTTP request headers, which allows remote attackers to cause a denial of service (memory consumption and unresponsive server) via an HTTP request with an unlimited number of headers, if a websocket or JSON-RPC listener is enabled (disabled by default).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <6.2.7
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.