CVE-2026-77622 - Sliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG Decoder
CVE ID :CVE-2026-77622 Published : Nov. 5, 2026, 9:18 p.m. | 1 hour, 50 minutes ago Description :Sliver is a command and control framework. Prior to 1.7.6, an HTTP(S) listener using the PNG encoder accepts attacker-controlled PNG dimensions without an effective decoded-size or pixel limit in...