Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to 1.7.0, the DNS C2 listener accepts unauthenticated TOTP bootstrap messages and allocates server-side DNS sessions without validating OTP values, even when EnforceOTP is enabled. Because sessions are stored without a cleanup/expiry path in this flow, an unauthenticated remote actor can repeatedly create sessions and drive memory exhaustion. This vulnerability is fixed in 1.7.0.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-09 | 1 | Disclosure1 |
| 2026-02-10 | 1 | Patch1 |
| 2026-03-18 | 1 | General1 |
CVE-2026-25791 Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to 1.7.0, the DNS C2 listener accepts unauthenticated TOTP bootstrap messages a… https://www.cve.org/CVERecord?id=CVE-2026-25791
Post summary
The CVE details a flaw in Sliver’s DNS C2 listener that accepts unauthenticated TOTP bootstrap messages before version 1.7.0, but no exploitation, patch, or PoC is provided.
🔴 Sliver C2, Unauthenticated OOM, #CVE-2026-25791 (Critical) https://dailycve.com/sliver-c2-unauthenticated-oom-cve-2026-25791-critical/
Post summary
The provided text references CVE-2026-25791 and links to a DailyCVE article but contains no actionable details or claims about exploitation, patches, or proof of concept.
Sliver C2 framework has a DNS C2 OTP bypass (CVE-2026-25791) enabling unauthenticated session flooding, leading to Denial of Service. Update recommended. #Sliver #C2 #infosec https://www.pulsepatch.io/posts/cve-2026-25791-sliver-dns-c2-otp-bypass-dos
Post summary
Sliver’s DNS C2 OTP bypass (CVE‑2026‑25791) permits unauthenticated session flooding that can cause a denial‑of‑service, and an update is recommended.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | bishopfox | sliver | - | - | - |