Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-26201

24
FAUCET Score

CVE-2026-26201 affects the emp3r0r C2 framework prior to version 3.21.2, where concurrent access to shared maps without proper synchronization can lead to a "fatal error: concurrent map read and map write" and subsequent process crash. This vulnerability has a CVSS score of 7.5 (HIGH), indicating that an unauthenticated attacker can remotely trigger a denial of service, causing availability loss. There is currently no known active exploitation, public exploit code, or Metasploit/Nuclei modules available, though it has garnered some community discussion and media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
< 3.21.2CPE matchmatch criteria
cpe:2.3:a:jm33-m0:emp3r0r:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 4.0

7.0HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector
NETWORK
Attack Complexity
HIGH
Attack Requirements
PRESENT
Privileges Required
LOW
User Interaction
NONE
VS Confidentiality
NONE
VS Integrity
NONE
VS Availability
HIGH
SS Confidentiality
NONE
SS Integrity
NONE
SS Availability
HIGH
Exploit Maturity
NOT_DEFINED
CvssVersion
4.0

Exploit Intelligence

EPSS Score
0.29%
Probability of exploitation in next 30 days
EPSS Percentile
21.3%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0029 is in the 5th percentile among its peer group of 51,553 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

github_advisorypatch availablevia nvd_reference
View patch
gopatch availablevia ghsa
Product: github.com/jm33-m0/emp3r0r/coreFixed in: 0.0.0-20260212232424-ea4d074f081d

Vendor Advisories (1)

goGHSA-f5p9-j34q-pwcchigh

emp3r0r Affected by Concurrent Map Access DoS (panic/crash)

Feb 17, 2026

References

github.com / jm33-m0/emp3r0r/commit/ea4d074f081dac6293f3aec38f01def5f08d5af5
Patch
github.com / jm33-m0/emp3r0r/releases/tag/v3.21.2
ProductRelease Notes
github.com / jm33-m0/emp3r0r/security/advisories/GHSA-f5p9-j34q-pwcc
ExploitVendor Advisory