PT-2026-29060

CVE-2026-5124

Published

2026-01-01

Updated

2026-08-24

Description by

CVSS 4.0

6.3

Medium

MetricsAV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X

Name of the Vulnerable Software and Affected Versions osrg GoBGP versions through 4.3.0

Description A security issue has been identified in osrg GoBGP. The BGPHeader.DecodeFromBytes function within the BGP Header Handler component, located in the file pkg/packet/bgp/bgp.go, is susceptible to improper access controls. Remote exploitation is possible, and the attack is considered to have high complexity with difficult exploitability.

Recommendations Deploy the patch with identifier f0f24a2a901cbf159260698211ab15c583ced131.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-284: Improper Access Control

CWE-266: Incorrect Privilege Assignment

Related identifiers