Skip to content

Vendor

BC-SECURITY vulnerabilities

2 published CVES affecting BC-SECURITY, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
1
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of BC-SECURITY alerts

Products

Latest BC-SECURITY CVEs

Newest publication first

  1. CVE-2026-92748 BC Security Empire before 6.7.1 Path Traversal File Upload RCE

    Published
    HighCVSS 8.7 EPSS 0.82%

    BC Security Empire before 6.7.1 fails to validate the multipart filename parameter in upload endpoints, allowing authenticated operators to write files to arbitrary paths on the C2 server. Attackers can use path traversal sequences in the filename to bypass directory containment...

  2. CVE-2024-6127 BC Security Empire Path Traversal RCE

    Published
    CriticalCVSS 9.8 EPSS 10.3% Framework module

    BC Security Empire before 5.9.3 is vulnerable to a path traversal issue that can lead to remote code execution. A remote, unauthenticated attacker can exploit this vulnerability over HTTP by acting as a normal agent, completing all cryptographic handshakes, and then triggering an...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.