High severity7.5GHSA Advisory· Published Sep 15, 2026· Updated Sep 30, 2026
CVE-2026-61554
CVE-2026-61554
Description
emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 4.2.5, the http_poll C2 transport accepts attacker-controlled HTTP polling sessions before CBOR MsgAuth authentication is completed. A remote unauthenticated attacker can create arbitrary polling sessions and send request bodies that are forwarded into the C2 dispatch path. This can consume server resources and trigger pre-auth C2 processing. Version 4.2.5 patches the issue.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/jm33-m0/emp3r0r/coreGo | < 0.0.0-20260531142011-aed3d81641ab | 0.0.0-20260531142011-aed3d81641ab |
Affected products
1Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.