CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Sliver: Nil Pointer Dereference in tunnelCloseHandler causes panic when a reverse tunnel (rportfwd) close is attempted |
| 29/03/2026 |
| CVE-2026-32941 | MEDIUM6.5 | Sliver is a command and control framework that uses a custom Wireguard netstack. Versions 1.7.3 and below contain a Remote OOM (Out-of-Memory) vulnerability in the Sliver C2 server's mTLS and WireGuard C2 transport layer. The socketReadEnvelope and socketWGReadEnvelope functions trust an attacker-controlled 4-byte leng | 20/03/2026 |
| CVE-2026-29781 | MEDIUM6.5 | Sliver is a command and control framework that uses a custom Wireguard netstack. In versions from 1.7.3 and prior, a vulnerability exists in the Sliver C2 server's Protobuf unmarshalling logic due to a systemic lack of nil-pointer validation. By extracting valid implant credentials and omitting nested fields in a signe | 07/03/2026 |
| GO-2026-4548 | Sliver has Potential Zip Bomb Denial of Service in GzipEncoder in github.com/bishopfox/sliver | 25/02/2026 |
| GHSA-2phg-qgmm-r638 | HIGH | Sliver has Potential Zip Bomb Denial of Service in GzipEncoder | 25/02/2026 |
| CVE-2026-25791 | HIGH7.5 | Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to 1.7.0, the DNS C2 listener accepts unauthenticated TOTP bootstrap messages and allocates server-side DNS sessions without validating OTP values, even when EnforceOTP is enabled. Because sessions are stored without a cleanup/expiry | 09/02/2026 |
| CVE-2026-25760 | MEDIUM6.5 | Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to 1.6.11, a path traversal in the website content subsystem lets an authenticated operator read arbitrary files on the Sliver server host. This is an authenticated path traversal / arbitrary file read issue, and it can expose creden | 06/02/2026 |
| GO-2026-4280 | Sliver Vulnerable to Pre-Auth Memory Exhaustion via NoEncoder Bypass in github.com/bishopfox/sliver | 12/01/2026 |
| GHSA-hjr9-wj7v-7hv8 | MEDIUM | Sliver Vulnerable to Pre-Auth Memory Exhaustion via NoEncoder Bypass | 05/01/2026 |
| CVE-2025-27093 | MEDIUM6.3 | Sliver is a command and control framework that uses a custom Wireguard netstack. In versions 1.5.43 and earlier, and in development version 1.6.0-dev, the netstack does not limit traffic between Wireguard clients. This allows clients to communicate with each other unrestrictedly, potentially enabling leaked or recovere | 28/10/2025 |
| CVE-2025-27090 | MEDIUM5.3 | Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. The reverse port forwarding in sliver teamserver allows the implant to open a reverse tunnel on the sliver teamserver without verifying if the operator instructed the | 19/02/2025 |
| CVE-2024-41111 | HIGH7.2 | Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. Sliver version 1.6.0 (prerelease) is vulnerable to RCE on the teamserver by a low-privileged "operator" user. The RCE is as the system root user. The exploit is prett | 18/07/2024 |
| CVE-2023-34758 | HIGH8.1 | Sliver from v1.5.x to v1.5.39 has an improper cryptographic implementation, which allows attackers to execute a man-in-the-middle attack via intercepted and crafted responses. | 28/08/2023 |