Bishopfox vulnerabilities

Products

• Sliver 11

Newest

• bishopfox sliver Sliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG Decoder CVE-2026-77622 Public exploitFix available 8.2 HighOctober 15, 2026
• bishopfox sliver Sliver 1.7.7 Denial of Service via PE Parser Slice Bounds in Operator RPC CVE-2026-102507 6.8 MediumSeptember 29, 2026
• bishopfox joro Joro: Unauthenticated Cross-Origin Plugin Upload Leads to RCE CVE-2026-53649 Fix available 9.6 CriticalJuly 8, 2026
• bishopfox sliver Sliver One-Click Remote Access: Insecure CORS & Unauthenticated MCP Interface CVE-2026-34227 Public exploitFix available 5.9 MediumMarch 31, 2026
• bishopfox sliver Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports CVE-2026-32941 Public exploit 5.7 MediumMarch 17, 2026
• bishopfox sliver Sliver: Authenticated Nil-Pointer Dereference in Handlers CVE-2026-29781 Public exploit 2.1 LowMarch 5, 2026
• bishopfox sliver Sliver has a DNS C2 OTP Bypass Allows Unauthenticated Session Flooding and Denial of Service CVE-2026-25791 Fix available 7.5 HighFebruary 6, 2026
• bishopfox sliver Website Path Traversal / Arbitrary File Read (Authenticated) in Sliver CVE-2026-25760 Fix available 6.5 MediumFebruary 5, 2026
• bishopfox sliver Sliver does not restricted traffic between Wireguard clients. CVE-2025-27093 Fix available 6.3 MediumOctober 28, 2025
• bishopfox sliver Server-Side Request Forgery (SSRF) in sliver teamserver CVE-2025-27090 Fix available 6.9 MediumFebruary 19, 2025
• bishopfox sliver BishopFox Sliver Authenticated Remote Code Execution CVE-2024-41111 Fix available 7.2 HighJuly 18, 2024
• bishopfox sliver Silver vulnerable to MitM attack against implants due to a cryptography vulnerability CVE-2023-34758 Fix available 8.1 HighJune 21, 2023