In ZNC before 1.9.1, remote code execution can occur in modtcl via a KICK. (CVE-2024-39844)
{ "section": "core" }
"https://advisories.mageia.org/MGASA-2024-0257.json"