What’s Vulnerable › Vulnerabilities

CVE-2026-92748: BC Security Empire before 6.7.1 Path Traversal File Upload RCE

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-16 · updated 2026-09-24
• Weakness: CWE-22

Description

BC Security Empire before 6.7.1 fails to validate the multipart filename parameter in upload endpoints, allowing authenticated operators to write files to arbitrary paths on the C2 server. Attackers can use path traversal sequences in the filename to bypass directory containment and write malicious files to sensitive locations for code execution.

Affected products

• BC-SECURITY Empire: before 6.7.1 — fixed in 6.7.1

How to fix

Upgrade to a fixed version: BC-SECURITY Empire 6.7.1. Check the vendor advisory for mitigations.

References

• https://github.com/BC-SECURITY/Empire
• https://github.com/BC-SECURITY/Empire/blob/v6.6.0/empire/server/core/download_service.py#L148-L193
• https://github.com/BC-SECURITY/Empire/commit/c33a626316cb20bc8ed707e03a22d324d5d4762a
• https://github.com/BC-SECURITY/Empire/issues/824
• https://github.com/BC-SECURITY/Empire/releases/tag/v6.7.1
• https://www.vulncheck.com/advisories/bc-security-empire-before-6.7.1-path-traversal-file-upload-rce
• https://github.com/BC-SECURITY/Empire/issues/824

Get alerted when CVE-2026-92748 or the next vulnerability affects your stack