BishopFox vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20252
3. 20268

Newest CVEs

• CVE-2026-77622

  Sliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG Decoder

  BishopFox · sliver

  High8.2
• CVE-2026-102507

  Sliver 1.7.7 Denial of Service via PE Parser Slice Bounds in Operator RPC

  BishopFox · sliver

  Medium6.8
• CVE-2026-53649

  Joro: Unauthenticated Cross-Origin Plugin Upload Leads to RCE

  BishopFox · joro

  Critical9.6
• CVE-2026-34227

  Sliver One-Click Remote Access: Insecure CORS & Unauthenticated MCP Interface

  BishopFox · sliver

  Medium5.9
• CVE-2026-32941

  Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports

  BishopFox · sliver

  Medium5.7
• CVE-2026-29781

  Sliver: Authenticated Nil-Pointer Dereference in Handlers

  BishopFox · sliver

  Low2.1
• CVE-2026-25791

  Sliver has a DNS C2 OTP Bypass Allows Unauthenticated Session Flooding and Denial of Service

  BishopFox · sliver

  High7.5
• CVE-2026-25760

  Website Path Traversal / Arbitrary File Read (Authenticated) in Sliver

  BishopFox · sliver

  Medium6.5
• CVE-2025-27093

  Sliver does not restricted traffic between Wireguard clients.

  BishopFox · sliver

  Medium6.3
• CVE-2025-27090

  Server-Side Request Forgery (SSRF) in sliver teamserver

  BishopFox · sliver

  Medium6.9