CyberSecBulletin

EmpireSoft vulnerabilities

We track 2 vulnerabilities in EmpireSoft products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 2, 2026.

2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score

Latest EmpireSoft vulnerabilities

  • 8.8 High severity

    EmpireCMS: Unrestricted Upload of File with Dangerous Type

    CVE-2025-15423EmpireSoft

    A vulnerability has been found in EmpireSoft EmpireCMS up to 8.0. Impacted is the function CheckSaveTranFiletype of the file e/class/connect.php. Such manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclose

  • 7.5 High severity

    EmpireCMS: Protection Mechanism Failure

    CVE-2025-15422EmpireSoftEPSS 1.27%

    A flaw has been found in EmpireSoft EmpireCMS up to 8.0. This issue affects the function egetip of the file e/class/connect.php of the component IP Address Handler. This manipulation causes protection mechanism failure. The attack may be initiated remotely. Th