Skip to content
OpenAdvisories

Package · Go

github.com/bishopfox/sliver

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.2
    CVE-2026-77622 Public exploit

    Sliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG Decoder

    Sliver is a command and control framework. Prior to 1.7.6, an HTTP(S) listener using the PNG encoder accepts attacker-controlled PNG dimensions without an effective decoded-size or pixel limit in util/encoders/images.go, while the listener nonce space impleme…

    BishopFox sliver github.com/bishopfox/sliver Go
  • Medium 5.9
    CVE-2026-34227 Public exploit

    Sliver One-Click Remote Access: Insecure CORS & Unauthenticated MCP Interface

    Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to version 1.7.4, a single click on a malicious link gives an unauthenticated attacker immediate, silent control over every active C2 session or beacon, capable of exfiltra…

    BishopFox sliver github.com/bishopfox/sliver Go
  • Medium 5.7
    CVE-2026-32941 Public exploit

    Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports

    Sliver is a command and control framework that uses a custom Wireguard netstack. Versions 1.7.3 and below contain a Remote OOM (Out-of-Memory) vulnerability in the Sliver C2 server's mTLS and WireGuard C2 transport layer. The socketReadEnvelope and socketWGRe…

    BishopFox sliver github.com/bishopfox/sliver Go
  • Low 2.1
    CVE-2026-29781 Public exploit

    Sliver: Authenticated Nil-Pointer Dereference in Handlers

    Sliver is a command and control framework that uses a custom Wireguard netstack. In versions from 1.7.3 and prior, a vulnerability exists in the Sliver C2 server's Protobuf unmarshalling logic due to a systemic lack of nil-pointer validation. By extracting va…

    BishopFox sliver github.com/bishopfox/sliver Go