BBishopFox

Products

Exploited and recent CVEs

• CVE-2026-77622 High 8.2 Sliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG Decoder 0.5%
• CVE-2026-102507 Medium 5.7 Sliver 1.7.7 Denial of Service via PE Parser Slice Bounds in Operator RPC 0.2%
• CVE-2026-53649 Critical 9.6 Joro: Unauthenticated Cross-Origin Plugin Upload Leads to RCE 0.3%
• CVE-2026-34227 Medium 5.9 Sliver One-Click Remote Access: Insecure CORS & Unauthenticated MCP Interface 0.4%
• CVE-2026-32941 Medium 5.7 Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports 0.3%
• CVE-2026-29781 Low 2.1 Sliver: Authenticated Nil-Pointer Dereference in Handlers 0.6%
• CVE-2026-25791 High 7.5 Sliver has a DNS C2 OTP Bypass Allows Unauthenticated Session Flooding and Denial of Service 0.4%
• CVE-2026-25760 Medium 6.5 Website Path Traversal / Arbitrary File Read (Authenticated) in Sliver 0.5%
• CVE-2025-27093 Medium 6.3 Sliver does not restricted traffic between Wireguard clients. 0.3%
• CVE-2025-27090 Medium 6.9 Server-Side Request Forgery (SSRF) in sliver teamserver 0.6%
• CVE-2024-41111 High 7.2 BishopFox Sliver Authenticated Remote Code Execution 0.7%