Jm33 M0

jm33-m0

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Emp3r0r

emp3r0r

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-26201 1Jm33 M0 1Emp3r0r Jun 17, 2026 Feb 19, 2026 7.0 HIGH· v4 7.5 HIGH· v3 N/A· v2 emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 3.21.2, multiple shared maps are accessed without consistent synchronization across goroutines. Under concurrent activity, Go runtime can t...Show more emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 3.21.2, multiple shared maps are accessed without consistent synchronization across goroutines. Under concurrent activity, Go runtime can trigger `fatal error: concurrent map read and map write`, causing C2 process crash (availability loss). Version 3.21.2 fixes this issue.Show less
CVE-2026-26068 1Jm33 M0 1Emp3r0r Jun 17, 2026 Feb 12, 2026 9.3 CRITICAL· v4 9.9 CRITICAL· v3 N/A· v2 emp3r0r is a stealth-focused C2 designed by Linux users for Linux environments. Prior to 3.21.1, untrusted agent metadata (Transport, Hostname) is accepted during check-in and later interpolated into tmux shell command s...Show more emp3r0r is a stealth-focused C2 designed by Linux users for Linux environments. Prior to 3.21.1, untrusted agent metadata (Transport, Hostname) is accepted during check-in and later interpolated into tmux shell command strings executed via /bin/sh -c. This enables command injection and remote code execution on the operator host. This vulnerability is fixed in 3.21.1.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2026-26201

1Jm33 M0

1Emp3r0r

Jun 17, 2026

Feb 19, 2026

7.0 HIGH· v4

7.5 HIGH· v3

N/A· v2

emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 3.21.2, multiple shared maps are accessed without consistent synchronization across goroutines. Under concurrent activity, Go runtime can trigger `fatal error: concurrent map read and map write`, causing C2 process crash (availability loss). Version 3.21.2 fixes this issue.Show less

CVE-2026-26068

1Jm33 M0

1Emp3r0r

Jun 17, 2026

Feb 12, 2026

9.3 CRITICAL· v4

9.9 CRITICAL· v3

N/A· v2

emp3r0r is a stealth-focused C2 designed by Linux users for Linux environments. Prior to 3.21.1, untrusted agent metadata (Transport, Hostname) is accepted during check-in and later interpolated into tmux shell command strings executed via /bin/sh -c. This enables command injection and remote code execution on the operator host. This vulnerability is fixed in 3.21.1.Show less