Threats affecting pkg:github/jm33-m0/emp3r0r

CVE-2026-61554 is a high-severity vulnerability in the emp3r0r C2 software prior to version 4.2.5. The issue involves uncontrolled resource consumption due to the http_poll C2 transport accepting attacker-controlled HTTP polling sessions before authentication is completed. This allows a remote unauthenticated attacker to create arbitrary polling sessions and send request bodies that are processed by the C2 server, potentially exhausting server resources. The vulnerability is patched in version 4.2.5.