CVE-2026-101991

An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP-LS peer to cause heap data disclosure via a malformed UPDATE sent over a session with the traffic-engineering address...

CVE-2026-101943

An Improper Input Validation vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a crafted BGP EVPN update message...

EUVD-2026-101321

An Improper Input Validation vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a crafted BGP EVPN update message...

Rocky Linux 8 [CIQ] Security Update: frr / frr-debuginfo / frr-debugsource / frr-selinux (crlsa-2026_49511)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202649511 advisory. frr: FRRouting: Denial of Service via crafted BGP UPDATE message CVE-2026-37460 Tenable has extracted the preceding description block directly from the CIQ securit...

Rocky Linux 9 [CIQ] Security Update: frr / frr-debuginfo / frr-debugsource / frr-selinux (crlsa-2026_49527)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202649527 advisory. frr: FRRouting: Denial of Service via crafted BGP UPDATE message CVE-2026-37460 Bug Fixes and Enhancements: Zebra is not installing the route in the kernel after...

Rocky Linux 9 [CIQ] Security Update: frr10 / frr10-debuginfo / frr10-debugsource / frr10-selinux (crlsa-2026_49607)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202649607 advisory. frr: FRRouting: Denial of Service via crafted BGP UPDATE message CVE-2026-37460 Bug Fixes and Enhancements: frr10 triggers SELinux denials when reading root's Pyth...

Rocky Linux 8 [CIQ] Security Update: frr / frr-debuginfo / frr-debugsource / frr-selinux Multiple Vulnerabilities (crlsa-2024_2981)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242981 advisory. frr: missing length check in bgpattrpsidsub can lead do DoS CVE-2023-31490 frr: processes invalid NLRIs if attribute length is zero CVE-2023-41358 frr: NUL...

Rocky Linux 10.2 [CIQ] Security Update: frr / frr-debuginfo / frr-debugsource / frr-selinux Multiple Vulnerabilities (crlsa-2026_24347)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202624347 advisory. frr: denial of service via crafted FlowSpec component CVE-2026-37457 frr: denial of service via crafted BGP UPDATE message CVE-2026-37459 Tenable has...

CentOS Linux 7 [TuxCare] Security Update: freerdp / freerdp-devel / freerdp-libs / libwinpr / libwinpr-devel (CENTOS7:CLSA-2026:1789779158)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1789779158 advisory. - FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in the async update message proxy for the PolygonSC and PolygonCB primary...

AlmaLinux 9.2 [TuxCare] Security Update: frr / frr-selinux Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1762420748)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1762420748 advisory. - An issue was discovered in FRRouting FRR through 9.0. bgpd/bgppacket.c processes NLRIs if the attribute length is zero...

CVE-2026-61550

Icinga 2 is an open source monitoring system. From 2.8 until 2.14.9, 2.15.4, and 2.16.2, certificate update JSON-RPC message handling does not validate that the sender is a trusted endpoint. An unauthenticated network attacker able to connect to TCP port 5665 can replace the node certificate and...

CVE-2026-49838

A flaw was found in GoBGP, an open-source Border Gateway Protocol BGP implementation. A configured confederation eBGP peer can send a specially crafted BGP UPDATE message with a zero-length ASPATH attribute. This malformed message is improperly handled during validation, leading to an unchecked...

SUSE-SU-2026:3868-1 Security update for quagga

This update for quagga fixes the following issue: - CVE-2026-37458: missing input validation in the MPREACHNLRI component allows authenticated attackers to cause a DoS via a crafted UPDATE message bsc1263974...

MiracleLinux 9 : frr10-10.4.3-3.el9_8.2 (AXSA:2026-1591:03)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1591:03 advisory. frr: FRRouting: Denial of Service via crafted BGP UPDATE message CVE-2026-37460 Tenable has extracted the preceding description block directly from the...

AlmaLinux 9 : frr10 (ALSA-2026:49607)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:49607 advisory. frr: FRRouting: Denial of Service via crafted BGP UPDATE message CVE-2026-37460 Bug Fixes and Enhancements: frr10 triggers SELinux denials when reading root's...

ALSA-2026:49511 Important: frr security update

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fixes: frr: FRRouting: Denial of Service via crafted BGP UPDATE message CVE-2026-37460 For more details about the security issues,...

RHEL 9 : frr (RHSA-2026:49527)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:49527 advisory. FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP an...

CVE-2026-67301

FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in the async update message proxy for the PolygonSC and PolygonCB primary drawing orders. When AsyncUpdate is enabled e.g., xfreerdp /async-update, updatemessagePolygonSC and updatemessagePolygonCB allocate a fresh points array but...

CVE-2026-67300: Use After Free

FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async update message proxy for RAIL WINDOWSTATEORDER and NOTIFYICONSTATEORDER when AsyncUpdate is enabled. When a malicious or compromised RDP server sends crafted update orders, the message proxy shallow-copies...

GO-2026-5525 GoBGP has a panic in AdjRib.Update via malformed BGP Update message (Nil Pointer Dereference) in github.com/osrg/gobgp

GoBGP has a panic in AdjRib.Update via malformed BGP Update message Nil Pointer Dereference in github.com/osrg/gobgp...