Live › vulnerability › CVE-2026-121602
Solanum, an IRC server daemon, copies channel names from JOIN and SJOIN messages into fixed-size buffers without a length check. A malicious server linked to it can send overlong names to crash the daemon or potentially run code on it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 17:21 UTC. All times on this page are UTC.
Only Solanum servers that accept server links from peers are exposed, since the flaw is triggered by a malicious linked server sending JOIN or SJOIN messages. Standalone servers with no server links are not reached by this path, and the sources do not say whether other configurations are affected.
No product ranges from the sources yet.
2ce64de or later.2ce64de or later (sources give no release version).Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Solanum before commit 2ce64de contains a heap-based buffer overflow vulnerability that allows a malicious linked server to corrupt memory by sending overlong channel names in JOIN or SJOIN messages. Attackers controlling a peer server can trigger strcpy and sprintf overflows in ms_join and ms_sjoin to crash the ircd or potentially achieve remote code execution.
This page as .md · .json · in your agent: get_signal("CVE-2026-121602")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.