TI-2026-26522 CVE-2026-34227 · GHSA-6fpf-248c-m7wm
Sliver One-Click Remote Access: Insecure CORS & Unauthenticated MCP Interface
Priority MEDIUM 60
Sliver is a command and control framework that uses a custom Wireguard netstack.
Vulnerabilities
7 records
TI-2026-25389 CVE-2026-32941 · GHSA-97vp-pwqj-46qc
Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports
Priority MEDIUM 59
Sliver is a command and control framework that uses a custom Wireguard netstack.
TI-2026-23367 CVE-2026-29781 · GHSA-hx52-cv84-jr5v
Sliver: Authenticated Nil-Pointer Dereference in Handlers
Priority MEDIUM 44
Sliver is a command and control framework that uses a custom Wireguard netstack.
TI-2026-20855 CVE-2026-25791 · GHSA-wxrw-gvg8-fqjp
Sliver has a DNS C2 OTP Bypass Allows Unauthenticated Session Flooding and Denial of Service
Priority LOW 39
Sliver is a command and control framework that uses a custom Wireguard netstack.
TI-2026-20827 CVE-2026-25760 · GHSA-2286-hxv5-cmp2
Website Path Traversal / Arbitrary File Read (Authenticated) in Sliver
Priority LOW 30
Sliver is a command and control framework that uses a custom Wireguard netstack.
TI-2025-19960 CVE-2025-27090 · GHSA-fh4v-v779-4g2w
Server-Side Request Forgery (SSRF) in sliver teamserver
Priority HIGH 70
Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing.
TI-2023-17391 CVE-2023-34758 · GHSA-8jxm-xp43-qh3q
Sliver from v1.5.x to v1.5.39 has an improper cryptographic implementation, which allows…
Priority HIGH 70
Sliver from v1.5.x to v1.5.39 has an improper cryptographic implementation, which allows attackers to execute a man-in-the-middle attack via intercepted and crafted responses.