Sliver EUVD-2026-17490

Sliver is a command-and-control framework that implements a custom Wireguard netstack to manage operator-to-beacon communications. The vulnerability stems from missing authentication checks (CWE-306: Missing Authentication for Critical Function) in the web interface or API layer that processes operator requests. An attacker can craft a malicious link that, when clicked by an authorized operator, triggers authentication bypass logic inherent in the Wireguard netstack implementation. The attack leverages the operator's authenticated browser session context but does not require the attacker to be authenticated themselves-the link itself carries sufficient context to hijack the session state. The CVSS vector indicates an unauthenticated remote attack (PR:N) requiring user interaction (UI:A) and attack time contingency (AT:P), suggesting the malicious link must be delivered at a moment when the operator is actively using Sliver.