CVE-2026-90668 - UnrealIRCd HTTP Header Denial of Service
Brief
CVE ID : CVE-2026-90668
Published : Sept. 13, 2026, 2:17 a. m.
- 2 hours, 36 minutes ago
Description : The webserver in UnrealIRCd 6.
- 5 through 6.
- 6 before 6.
- 7 does not limit the number of HTTP request headers, which allows remote attackers to cause a denial of service (memory consumption and unresponsive server) via an HTTP request with an unlimited number of headers, if a websocket or JSON-RPC listener is enabled (disabled by default).
Severity: 8.7
- HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...