BC Security vulnerabilities
We track 2 vulnerabilities in BC Security products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 16, 2026.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest BC Security vulnerabilities
- 8.8 High severity
Empire: Improper Limitation of a Pathname to a Restricted Directory
BC Security Empire before 6.7.1 fails to validate the multipart filename parameter in upload endpoints, allowing authenticated operators to write files to arbitrary paths on the C2 server. Attackers can use path traversal sequences in the filename to bypass di
- 9.8 Critical severity
Empire: Improper Limitation of a Pathname to a Restricted Directory
BC Security Empire before 5.9.3 is vulnerable to a path traversal issue that can lead to remote code execution. A remote, unauthenticated attacker can exploit this vulnerability over HTTP by acting as a normal agent, completing all cryptographic handshakes, an