Skip to content
OpenAdvisories

Vendor

BishopFox

11 known vulnerabilities.

BishopFox at a glance

Last 12 months
8
Critical · all time
1
Exploited · all time
0
Public exploit · all time
4
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 2 vulnerabilities March 2026: 3 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 2 vulnerabilities, 1 critical Sep October 2026: 0 vulnerabilities November 2026: 1 vulnerability
Show as table
MonthVulnerabilitiesCritical
Nov 202610
Oct 202600
Sep 202621
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202630
Feb 202620
Jan 202600
Dec 202500
Nov 202500
Oct 202510
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202510
Jan 202500
Dec 202400

Products

sliver 10 joro 1
All Critical High Medium Low Exploited only Public exploit

11 results · Feed

  • High 8.2
    CVE-2026-77622 Public exploit

    Sliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG Decoder

    Sliver is a command and control framework. Prior to 1.7.6, an HTTP(S) listener using the PNG encoder accepts attacker-controlled PNG dimensions without an effective decoded-size or pixel limit in util/encoders/images.go, while the listener nonce space impleme…

    BishopFox sliver github.com/bishopfox/sliver Go
  • Medium 5.7
    CVE-2026-102507

    Sliver 1.7.7 Denial of Service via PE Parser Slice Bounds in Operator RPC

    Sliver C2 framework version 1.7.7 and earlier contains an unhandled panic vulnerability in the operator gRPC handler that allows an attacker controlling a compromised implant to crash the entire teamserver by returning a malformed or empty Download response. …

    BishopFox sliver
  • Critical 9.6
    CVE-2026-53649

    Joro: Unauthenticated Cross-Origin Plugin Upload Leads to RCE

    Joro is a web exploitation framework. Prior to version 1.1.1, Joro's default proxy mode exposes a local API on 127.0.0.1:9090 that performs no authentication and applies a wildcard CORS policy. Because plugin uploads use the CORS-safelisted multipart/form-dat…

    BishopFox joro github.com/BishopFox/joro Go
  • Medium 5.9
    CVE-2026-34227 Public exploit

    Sliver One-Click Remote Access: Insecure CORS & Unauthenticated MCP Interface

    Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to version 1.7.4, a single click on a malicious link gives an unauthenticated attacker immediate, silent control over every active C2 session or beacon, capable of exfiltra…

    BishopFox sliver github.com/bishopfox/sliver Go
  • Medium 5.7
    CVE-2026-32941 Public exploit

    Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports

    Sliver is a command and control framework that uses a custom Wireguard netstack. Versions 1.7.3 and below contain a Remote OOM (Out-of-Memory) vulnerability in the Sliver C2 server's mTLS and WireGuard C2 transport layer. The socketReadEnvelope and socketWGRe…

    BishopFox sliver github.com/bishopfox/sliver Go
  • Low 2.1
    CVE-2026-29781 Public exploit

    Sliver: Authenticated Nil-Pointer Dereference in Handlers

    Sliver is a command and control framework that uses a custom Wireguard netstack. In versions from 1.7.3 and prior, a vulnerability exists in the Sliver C2 server's Protobuf unmarshalling logic due to a systemic lack of nil-pointer validation. By extracting va…

    BishopFox sliver github.com/bishopfox/sliver Go
  • High 7.5
    CVE-2026-25791

    Sliver has a DNS C2 OTP Bypass Allows Unauthenticated Session Flooding and Denial of Service

    Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to 1.7.0, the DNS C2 listener accepts unauthenticated TOTP bootstrap messages and allocates server-side DNS sessions without validating OTP values, even when EnforceOTP is …

    BishopFox sliver github.com/bishopfox/sliver Go
  • Medium 6.5
    CVE-2026-25760

    Website Path Traversal / Arbitrary File Read (Authenticated) in Sliver

    Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to 1.6.11, a path traversal in the website content subsystem lets an authenticated operator read arbitrary files on the Sliver server host. This is an authenticated path tr…

    BishopFox sliver github.com/bishopfox/sliver Go
  • Medium 6.3
    CVE-2025-27093

    Sliver does not restricted traffic between Wireguard clients.

    Sliver is a command and control framework that uses a custom Wireguard netstack. In versions 1.5.43 and earlier, and in development version 1.6.0-dev, the netstack does not limit traffic between Wireguard clients. This allows clients to communicate with each …

    BishopFox sliver github.com/bishopfox/sliver Go
  • Medium 6.9
    CVE-2025-27090

    Server-Side Request Forgery (SSRF) in sliver teamserver

    Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. The reverse port forwarding in sliver teamserver allows the implant to open a reverse tunnel on the slive…

    BishopFox sliver github.com/bishopfox/sliver Go
  • High 7.2
    CVE-2024-41111

    BishopFox Sliver Authenticated Remote Code Execution

    Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. Sliver version 1.6.0 (prerelease) is vulnerable to RCE on the teamserver by a low-privileged "operator" u…

    BishopFox sliver github.com/bishopfox/sliver Go