Empire vulnerabilities

2 known vulnerabilities in Empire from BC Security. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Empire: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-92748Sep 16, 2026BC Security

  BC Security Empire before 6.7.1 fails to validate the multipart filename parameter in upload endpoints, allowing authenticated operators to write files to arbitrary paths on the C2 server. Attackers can use path traversal sequences in the filename to bypass di

• 9.8 Critical severity

  Empire: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-6127Jun 27, 2024BC SecurityEPSS 10.3%

  BC Security Empire before 5.9.3 is vulnerable to a path traversal issue that can lead to remote code execution. A remote, unauthenticated attacker can exploit this vulnerability over HTTP by acting as a normal agent, completing all cryptographic handshakes, an