https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T05:24:15.996014+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-26068 CVE-2026-26068 — emp3r0r Agent-Controlled Metadata to Operator RCE (tmux Command Injection) 2026-10-09T05:24:16.011830+00:00

Affected: jm33-m0 emp3r0r

emp3r0r is a stealth-focused C2 designed by Linux users for Linux environments. Prior to 3.21.1, untrusted agent metadata (Transport, Hostname) is accepted during check-in and later interpolated into tmux shell command strings executed via /bin/sh -c. This enables command injection and remote code execution on the operator host. This vulnerability is fixed in 3.21.1.