CVE-2026-92748

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-92748
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-92748.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-92748
Published
2026-09-16T20:32:22Z
Modified
2026-09-19T03:30:50Z
Severity
  • 8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
BC Security Empire before 6.7.1 Path Traversal File Upload RCE
Details

BC Security Empire before 6.7.1 fails to validate the multipart filename parameter in upload endpoints, allowing authenticated operators to write files to arbitrary paths on the C2 server. Attackers can use path traversal sequences in the filename to bypass directory containment and write malicious files to sensitive locations for code execution.

Database specific 
{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-22"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/92xxx/CVE-2026-92748.json"
}
References

Affected packages

Git / github.com/bc-security/empire

Affected ranges

Type
GIT
Repo
https://github.com/bc-security/empire
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
ca5b77497f82011646422c38dfe67b9b8ebdd85f
Fixed
c33a626316cb20bc8ed707e03a22d324d5d4762a
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "6.7.1"
        }
    ],
    "source": [
        "DESCRIPTION",
        "REFERENCES"
    ]
}

Affected versions

1.*
1.1
1.2
1.2.1
1.3
1.3.1
1.4
1.5
2.*
2.0
2.4
2.5
v3.*
v3.0.0
v3.0.1
v3.0.2
v3.0.3
v3.0.4
v3.0.5
v3.0.6
v3.0.7
v3.1.0
v3.1.1
v3.1.2
v3.1.3
v3.1.4
v3.1.5
v3.2.0
v3.2.1
v3.2.2
v3.2.3
v3.3.0
v3.3.1
v3.3.2
v3.3.3
v3.3.4
v3.4.0
v3.5.0
v3.5.1
v3.5.2
v3.6.0
v3.6.1
v3.6.2
v3.6.3
v3.7.2
v3.8.2
v4.*
v4.0.1
v4.0.2
v4.1.3
v4.10.0
v4.2.0
v4.3.3
v4.4.1
v4.5.3
v4.5.4
v4.5.5
v4.6.1
v4.7.1
v4.7.3
v4.8.0
v4.8.1
v4.8.3
v4.8.4
v4.9.0
v5.*
v5.0.3
v5.0.4
v5.1.2
v5.10.1
v5.10.2
v5.10.3
v5.11.2
v5.11.4
v5.11.5
v5.11.6
v5.11.7
v5.12.0
v5.12.1
v5.12.2
v5.2.2
v5.4.2
v5.5.3
v5.5.4
v5.6.3
v5.6.4
v5.7.3
v5.8.1
v5.8.2
v5.8.3
v5.8.4
v5.9.1
v5.9.2
v5.9.3
v5.9.4
v5.9.5
v6.*
v6.0.0
v6.0.1
v6.0.2
v6.0.3
v6.1.2
v6.1.3
v6.2.0
v6.2.1
v6.3.0
v6.4.1
v6.5.0
v6.6.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-92748.json"