PatchTheCVEempirecms vulnerabilities and fixes
Recent CVEs affecting empirecms, with upgrade or downgrade steps. 3 tracked.
empirecms has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-01-02. Highest priority: CVE-2025-15422 (score 46/100).
- CVE-2025-15422 MEDIUM 5.3 UPGRADE A flaw has been found in EmpireSoft EmpireCMS up to 8.0
- CVE-2025-15423 MEDIUM 6.3 UPGRADE A vulnerability has been found in EmpireSoft EmpireCMS up to 8.0
- CVE-2023-50162 HIGH 7.2 DOWNGRADE SQL injection vulnerability in EmpireCMS v7.5, allows remote attackers to execute arbitrary code and obtain se
FAQ
How do I fix empirecms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is empirecms being exploited right now?
None of the tracked empirecms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which empirecms CVE should I patch first?
CVE-2025-15422 currently ranks highest (46/100): A flaw has been found in EmpireSoft EmpireCMS up to 8.0.