← Back

Nefarious2

nefarious2

Vendor: Nefarious2 Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Nefarious2 Project
1Nefarious2
May 13, 2026
Mar 7, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The m_authenticate function in ircd/m_authenticate.c in nefarious2 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted AUTHENTICATE parameter.