This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-34227 | BDVDB-2026-323951 Detail

BishopFoxsliver

Description#

Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to version 1.7.4, a single click on a malicious link gives an unauthenticated attacker immediate, silent control over every active C2 session or beacon, capable of exfiltrating all collected target data (e.g. SSH keys, ntds.dit) or destroying the entire compromised infrastructure, entirely through the operator's own browser. This issue has been patched in version 1.7.4.

Impact#

Per CVSS v4.0: confidentiality impact high, integrity impact low, availability impact low. Attack vector: network.

Weaknesses#

  • CWE-306 Missing Authentication for Critical Function
  • CWE-942 Permissive Cross-domain Policy with Untrusted Domains

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.