Oosrg

Products

Exploited and recent CVEs

• CVE-2026-49838 Medium 5.9 GoBGP confederation validation panics on empty AS_PATH attribute 0.4%
• CVE-2026-49837 Medium 5.9 GoBGP: BGP OPEN capability parser may read capability values outside declared CapLen boundaries 0.3%
• CVE-2026-41643 High 7.5 GoBGP: Remote Denial of Service (Panic) in UpdatePathAttrs4ByteAs via Malformed BGP UPDATE 0.5%
• CVE-2026-42285 High 7.5 GoBGP: Panic in AdjRib.Update via malformed BGP Update message (Nil Pointer Dereference) 0.4%
• CVE-2026-41642 High 7.5 GoBGP: Remote Denial of Service (Panic) via Malformed Well-known Path Attribute 0.5%
• CVE-2026-7737 Medium 5.3 osrg GoBGP BMP Parser bmp.go BMPStatisticsReport.ParseBody out-of-bounds 0.6%
• CVE-2026-7736 High 7.3 osrg GoBGP mrt.go parseRibEntry integer underflow 0.5%
• CVE-2026-7735 High 7.3 osrg GoBGP AIGP Attribute bgp.go PathAttributeAigp.DecodeFromBytes buffer overflow 0.4%
• CVE-2026-7734 Medium 5.3 osrg GoBGP SRv6 L3 Service prefix_sid.go SRv6L3ServiceAttribute.DecodeFromBytes denial of service 0.5%
• CVE-2026-5124 Low 3.7 osrg GoBGP BGP Header bgp.go BGPHeader.DecodeFromBytes access control 0.3%
• CVE-2026-5123 Low 3.7 osrg GoBGP bgp.go DecodeFromBytes off-by-one 0.4%
• CVE-2026-5122 Low 3.7 osrg GoBGP BGP OPEN Message bgp.go DecodeFromBytes access control 0.3%
• CVE-2025-7464 Low 3.7 osrg GoBGP rtr.go SplitRTR out-of-bounds 0.5%