| CVE-2026-42285 |
high |
7.5 |
7.5 |
|
|
|
29d ago |
GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. In version 4.4.0, an unauthenticated remote BGP peer can trigger a fatal panic in GoBGP by sending… |
| CVE-2026-41643 |
high |
7.5 |
7.5 |
|
|
|
29d ago |
GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. Prior to version 4.3.0, a remote Denial of Service (DoS) vulnerability exists in GoBGP where a mal… |
| CVE-2026-41642 |
high |
7.5 |
7.5 |
|
|
|
29d ago |
GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. In version 4.3.0, a remote Denial of Service (DoS) vulnerability exists in GoBGP due to a nil poin… |
| CVE-2026-37461 |
high |
7.5 |
7.5 |
|
|
|
1mo ago |
An out-of-bounds read in the ParseIP6Extended function (/bgp/bgp.go) of gobgp v4.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message. |
| CVE-2026-7736 |
high |
7.5 |
7.5 |
|
|
|
1mo ago |
A vulnerability was determined in osrg GoBGP up to 4.3.0. Affected by this vulnerability is the function parseRibEntry of the file pkg/packet/mrt/mrt.go. Executing a manipulation can lead to integer … |
| CVE-2026-7734 |
high |
7.5 |
7.5 |
|
|
|
1mo ago |
A vulnerability has been found in osrg GoBGP up to 4.3.0. This impacts the function SRv6L3ServiceAttribute.DecodeFromBytes of the file pkg/packet/bgp/prefix_sid.go of the component SRv6 L3 Service. S… |
| CVE-2026-30405 |
unknown |
— |
— |
|
|
|
3mo ago |
An issue in GoBGP gobgpd v.4.2.0 allows a remote attacker to cause a denial of service via the NEXT_HOP path attribute |