CVE-2026-121602 — Vulnerability intelligence
solanum-ircd — solanum
Published:
- CVSS
- 8.5
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
Solanum before commit 2ce64de contains a heap-based buffer overflow vulnerability that allows a malicious linked server to corrupt memory by sending overlong channel names in JOIN or SJOIN messages. Attackers controlling a peer server can trigger strcpy and sprintf overflows in ms_join and ms_sjoin to crash the ircd or potentially achieve remote code execution.