GO-2026-4280
NoneCVSS
—
EPSS
—
Published
Jan 12, 2026
CISA due date
—
The record
Sliver Vulnerable to Pre-Auth Memory Exhaustion via NoEncoder Bypass in github.com/bishopfox/sliver
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/bishopfox/sliver | 1.5.0 | No fix |
| go | github.com/bishopfox/sliver | 1.5.0 | No fix |
Related vulnerabilities
- GO-2026-4548 Sliver has Potential Zip Bomb Denial of Service in GzipEncoder in… Also affects github.com/bishopfox/sliver
- GO-2026-4445 Sliver Vulnerable to Website Path Traversal / Arbitrary File Read (Authenticated) in… Also affects github.com/bishopfox/sliver
- GO-2026-4466 Sliver has DNS C2 OTP Bypass that Allows Unauthenticated Session Flooding and Denial of… Also affects github.com/bishopfox/sliver
- CVE-2026-25791 Sliver is a command and control framework that uses a custom Wireguard netstack. Also affects github.com/bishopfox/sliver
- CVE-2026-25760 Sliver is a command and control framework that uses a custom Wireguard netstack. Also affects github.com/bishopfox/sliver
- GO-2025-4079 Silver has unrestricted traffic between Wireguard clients in github.com/bishopfox/sliver Also affects github.com/bishopfox/sliver
- CVE-2025-27093 Sliver is a command and control framework that uses a custom Wireguard netstack. Also affects github.com/bishopfox/sliver