CVE-2025-27090

CVE-2025-27090 pertains to Sliver, an open-source adversary emulation framework. The issue is in the reverse port forwarding feature of the Sliver teamserver: the implant can open a reverse tunnel without verifying operator intent. The documented impact is the exposure of the server’s IP address ...

CVE-2026-29781

Technical details about CVE-2026-29781 are not provided in the connected documents. Public info in these sources confirms the CVE exists but lacks affected product-specific details, root cause, or patch info. Monitor for official advisories.

CVE-2023-34758

CVE-2023-34758 affects Sliver versions 1.5.x up to 1.5.39. The issue is an improper cryptographic implementation that enables a man-in-the-middle attack when an attacker can intercept and craft responses. Public reports (Red Hat, OSV, CN, and GitHub advisories) describe the vulnerability as a cry...

CVE-2026-34227

Sliver is an open-source C2 framework using a custom WireGuard netstack. Technical details in connected docs show a vulnerability in versions prior to 1.7.4 where a single click on a malicious link can grant an unauthenticated attacker immediate, silent control over active C2 sessions or beacons,...

CVE-2026-25791

Sliver (CVE-2026-25791) reports a DNS C2 OTP bypass where the DNS listener accepts unauthenticated TOTP bootstrap messages and allocates sessions without OTP validation, even with EnforceOTP enabled. This allows unauthenticated remote session creation leading to memory exhaustion and denial of se...

CVE-2026-25760

CVE-2026-25760 (Sliver): A path traversal in Sliver’s website content subsystem allows an authenticated operator to read arbitrary files on the Sliver server host (credentials, configs, keys). Prior to 1.6.11, this is exploitable via manipulated content paths; fixed in 1.6.11. Affected components...

CVE-2026-32941

Sliver C2 framework (git: github.com/bishopfox/sliver) is affected. Versions 1.7.3 and earlier expose a Remote OOM due to memory allocation based on an attacker-controlled 4‑byte length prefix in the mTLS and WireGuard C2 transports. The socketReadEnvelope and socketWGReadEnvelope code paths trus...