CVE-2026-77622

The Sliver command and control framework (versions prior to 1.7.6 ) is vulnerable to an unauthenticated Denial of Service (DoS) attack via its HTTP(S) listener. The root cause is a lack of decoded-size or pixel limits in util/encoders/images.go, combined with a small, brute-forceable nonce space ...