GCVE - cpe:2.3:a:bc-security:empire:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:bc-security:empire:*:*:*:*:*:*:*:*

part: a version: * update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-92748`	vulnerable	2026-10-13 12:28:53.381804	BC Security Empire before 6.7.1 Path Traversal File Upload RCE HIGH (8.8) BC Security Empire before 6.7.1 fails to validate the multipart filename parameter in upload endpoints, allowing authenticated operators to write files to arbitrary paths on the C2 server. Attackers can use path traversal sequences in the filename to bypass directory containment and write malicious files to sensitive locations for code execution. Published: 2026-09-16T20:32:22.030Z Updated: 2026-09-18T18:25:40.047Z Open on db.gcve.eu Reference links https://github.com/BC-SECURITY/Empire/issues/824 https://github.com/BC-SECURITY/Empire https://github.com/BC-SECURITY/Empire/blob/v6.6.0/empire/server/core/download_service.py#L148-L193 https://github.com/BC-SECURITY/Empire/commit/c33a626316cb20bc8ed707e03a22d324d5d4762a https://github.com/BC-SECURITY/Empire/releases/tag/v6.7.1	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.