BishopFox

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

BishopFox records in CISA KEV

No BishopFox vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Sliver 7 records HIGH

Records

7 records in Sliver · all components

TI-2025-19960 CVE-2025-27090 · GHSA-fh4v-v779-4g2w

Server-Side Request Forgery (SSRF) in sliver teamserver

HIGH 70

Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00631 Published 2025-02-19 Fixed in 1.5.43 CWE-918

TI-2023-17391 CVE-2023-34758 · GHSA-8jxm-xp43-qh3q

Sliver from v1.5.x to v1.5.39 has an improper cryptographic implementation, which allows…

HIGH 70

Sliver from v1.5.x to v1.5.39 has an improper cryptographic implementation, which allows attackers to execute a man-in-the-middle attack via intercepted and crafted responses.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00588 Published 2023-08-28 Fixed in 1.5.40 CWE-327

TI-2026-26522 CVE-2026-34227 · GHSA-6fpf-248c-m7wm

Sliver One-Click Remote Access: Insecure CORS & Unauthenticated MCP Interface

MEDIUM 60

Sliver is a command and control framework that uses a custom Wireguard netstack.

CVSS 4.0MEDIUM 5.9 Network No auth User interaction EPSS 0.00411 Published 2026-03-31 Fixed in 1.7.4 CWE-306

TI-2026-25389 CVE-2026-32941 · GHSA-97vp-pwqj-46qc

Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports

MEDIUM 59

Sliver is a command and control framework that uses a custom Wireguard netstack.

CVSS 4.0MEDIUM 5.7 Network Low privileges No interaction EPSS 0.00317 Published 2026-03-20 No fix listed CWE-770

TI-2026-23367 CVE-2026-29781 · GHSA-hx52-cv84-jr5v

Sliver: Authenticated Nil-Pointer Dereference in Handlers

MEDIUM 44

Sliver is a command and control framework that uses a custom Wireguard netstack.

CVSS 4.0LOW 2.1 Network Low privileges No interaction EPSS 0.00568 Published 2026-03-07 No fix listed CWE-476

TI-2026-20855 CVE-2026-25791 · GHSA-wxrw-gvg8-fqjp

Sliver has a DNS C2 OTP Bypass Allows Unauthenticated Session Flooding and Denial of Service

LOW 39

Sliver is a command and control framework that uses a custom Wireguard netstack.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00447 Published 2026-02-09 Fixed in 1.7.0, 1.6.12 CWE-306

TI-2026-20827 CVE-2026-25760 · GHSA-2286-hxv5-cmp2

Website Path Traversal / Arbitrary File Read (Authenticated) in Sliver

LOW 30

Sliver is a command and control framework that uses a custom Wireguard netstack.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00539 Published 2026-02-06 Fixed in 1.6.11 CWE-22

Open these records in search →