CVE-2026-101976 Junos OS and Junos OS Evolved: In a non-4byte-AS scenario a specific BGP update causes an rpd crash

An Out-of-bounds Write vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an eBGP peer which has not negotiated four-octet-AS capability sending a specifically malformed BGP update to cause a Denial-of-Service DoS...

CVE-2026-101976

Juniper Networks Junos OS and Junos OS Evolved are affected by an Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) . This flaw is triggered when an eBGP peer that has not negotiated four-octet-AS capability sends a specifically malformed BGP update. The resulting impact is a...

EUVD-2026-101492

A NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated configured BGP peer to cause a denial of service via a BGP UPDATE when ISO-VPN and egress-protection configuration is enabled...

EUVD-2026-101491

A NULL Pointer Dereference vulnerability in the routing protocol daemon RPD of Juniper Networks Junos OS and Junos OS Evolved allows a configured peer sending a BGP UPDATE to cause a denial of service when an import policy with then source-based-forwarding next-hop next-table is configured to...

CVE-2026-102087

An Incomplete List of Disallowed Inputs vulnerability exists in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved . An unauthenticated, adjacent attacker can trigger a Denial-of-Service (DoS) by sending a specific valid, optional, non-transitive BGP update over a...

Rocky Linux 10.2 [CIQ] Security Update: frr / frr-debuginfo / frr-debugsource / frr-selinux Multiple Vulnerabilities (crlsa-2026_24347)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202624347 advisory. frr: denial of service via crafted FlowSpec component CVE-2026-37457 frr: denial of service via crafted BGP UPDATE message CVE-2026-37459 Tenable has...

Rocky Linux 9 [CIQ] Security Update: frr10 / frr10-debuginfo / frr10-debugsource / frr10-selinux Multiple Vulnerabilities (crlsa-2026_24370)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202624370 advisory. frr: denial of service via crafted FlowSpec component CVE-2026-37457 frr: denial of service via crafted BGP UPDATE message CVE-2026-37459 Tenable has...

Rocky Linux 8 [CIQ] Security Update: frr / frr-debuginfo / frr-debugsource / frr-selinux Multiple Vulnerabilities (crlsa-2024_2981)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242981 advisory. frr: missing length check in bgpattrpsidsub can lead do DoS CVE-2023-31490 frr: processes invalid NLRIs if attribute length is zero CVE-2023-41358 frr: NUL...

Rocky Linux 9 [CIQ] Security Update: frr / frr-debuginfo / frr-debugsource / frr-selinux (crlsa-2026_49527)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202649527 advisory. frr: FRRouting: Denial of Service via crafted BGP UPDATE message CVE-2026-37460 Bug Fixes and Enhancements: Zebra is not installing the route in the kernel after...

Rocky Linux 9 [CIQ] Security Update: frr10 / frr10-debuginfo / frr10-debugsource / frr10-selinux (crlsa-2026_49607)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202649607 advisory. frr: FRRouting: Denial of Service via crafted BGP UPDATE message CVE-2026-37460 Bug Fixes and Enhancements: frr10 triggers SELinux denials when reading root's Pyth...

AlmaLinux 9.6 [TuxCare] Security Update: frr / frr-selinux (ALMALINUX9.6:CLSA-2026:1786095204)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1786095204 advisory. - Missing input validation in the rfapiRibBi2Ri function rfapirib.c of FRRouting FRR stable/10.0 to stable/10.6 allows attackers to cause a...

Rocky Linux 9.6 [TuxCare] Security Update: frr / frr-selinux (ALMALINUX9.6:CLSA-2026:1786095204)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1786095204 advisory. - Missing input validation in the rfapiRibBi2Ri function rfapirib.c of FRRouting FRR stable/10.0 to stable/10.6 allows attackers to cause a...

Rocky Linux 8 [CIQ] Security Update: frr / frr-debuginfo / frr-debugsource / frr-selinux (crlsa-2026_49511)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202649511 advisory. frr: FRRouting: Denial of Service via crafted BGP UPDATE message CVE-2026-37460 Tenable has extracted the preceding description block directly from the CIQ securit...

AlmaLinux 9.2 [TuxCare] Security Update: frr / frr-selinux Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1762420748)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1762420748 advisory. - An issue was discovered in FRRouting FRR through 9.0. bgpd/bgppacket.c processes NLRIs if the attribute length is zero...

AlmaLinux 9.2 [TuxCare] Security Update: frr / frr-selinux (ALMALINUX9.2:CLSA-2026:1786035720)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786035720 advisory. - Missing input validation in the rfapiRibBi2Ri function rfapirib.c of FRRouting FRR stable/10.0 to stable/10.6 allows attackers to cause a...

CVE-2026-49838

A flaw was found in GoBGP, an open-source Border Gateway Protocol BGP implementation. A configured confederation eBGP peer can send a specially crafted BGP UPDATE message with a zero-length ASPATH attribute. This malformed message is improperly handled during validation, leading to an unchecked...

CVE-2026-49838

GoBGP , an open-source BGP implementation in Go, is vulnerable to a denial-of-service in its BGP UPDATE validator prior to version 4.7.0 . When a confederation eBGP peer sends a malformed UPDATE containing a zero-length AS_PATH , the attribute passes initial decoding but triggers an unchecked p.V...

EUVD-2026-75807

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length ASPATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. The vulnerable path is in the BGP...

CVE-2026-49838 GoBGP confederation validation panics on empty AS_PATH attribute

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length ASPATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. The vulnerable path is in the BGP...

TencentOS Server 3: frr (TSSA-2026:0894)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0894 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...