Vulnerability · Published Sep 29, 2026 · Assigned by VulnCheck

CVE-2026-102507Sliver 1.7.7 Denial of Service via PE Parser Slice Bounds in Operator RPC

Medium 5.7

In plain English

A medium-severity out-of-bounds read in sliver from BishopFox. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities).

Severity (CVSS 3.1)5.7Medium

Exploit odds (30 days)0.2%top 92.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Sliver C2 framework version 1.7.7 and earlier contains an unhandled panic vulnerability in the operator gRPC handler that allows an attacker controlling a compromised implant to crash the entire teamserver by returning a malformed or empty Download response. Attackers can send zero-length or 1-3 byte data payloads through a hostile implant session to trigger an out-of-bounds slice access in the vendored Binject library's BinaryMagic function, which propagates unrecovered through the operator gRPC interceptor chain and terminates the server process, affecting all connected operators.

Affected products (as reported)

Vendor	Product	Versions
BishopFox	sliver	1.1.0 – through 1.7.7

Weakness: CWE-125 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

References

https://github.com/h00die/sliver_1.7.7_DoS exploit, technical-description
VulnCheck Advisory third-party-advisory