Znc · Znc · CVE-2024-39844
**Name of the Vulnerable Software and Affected Versions**
ZNC versions prior to 1.9.1
**Description**
The issue allows for remote code execution in the modtcl module of ZNC, which can be triggered through a prepared kick message.
**Recommendations**
For versions prior to 1.9.1, update to version 1.9.1 or later to resolve the issue. As a temporary workaround, consider disabling the modtcl module until a patch is available. Restrict access to the modtcl module to minimize the risk of exploitation.