tag
C2
High
Sliver C2 MCP Server Unauthenticated CORS/Preflight Bypass (CVE-2026-34227)
CVE-2026-34227 (GHSA-6fpf-248c-m7wm)·
Sliver C2 framework — MCP (Model Context Protocol) server interface
unpatched
High
Immich Stored XSS to API Key Exfiltration and Account Hijacking (CVE-2026-35455)
CVE-2026-35455·
Immich (self-hosted photo/video management)
unpatched