CVE-2026-26201

Katalog CVE

CVSS 7.5 · High EPSS 0,46%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada jm33-m0 emp3r0r. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 3.21.2, multiple shared maps are accessed without consistent synchronization across goroutines. Under concurrent activity, Go runtime can trigger `fatal error: concurrent map read and map write`, causing C2 process crash (availability loss). Version 3.21.2 fixes this issue.

Rincian

Terbit di NVD

19 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-663: Use of a Non-reentrant Function in a Concurrent Context

EPSS (30 hari)

0,46% peluang dieksploitasi; lebih tinggi dari 38,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/jm33-m0/emp3r0r/security/advisories/GHSA-f5p9-j34q-pwcc exploit · advisory vendor
• https://github.com/jm33-m0/emp3r0r/commit/ea4d074f081dac6293f3aec38f01def5f08d5af5 patch
• https://github.com/jm33-m0/emp3r0r/releases/tag/v3.21.2 product · release notes