DEBIAN-CVE-2026-49838

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length ASPATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. The vulnerable path is in the BGP...

CVE-2026-49838

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length ASPATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. The vulnerable path is in the BGP...

CVE-2026-49838 vulnerabilities

Vulnerabilities for packages: cilium-cli, kube-vip-fips, kube-vip...

CVE-2026-49838

creationtimestamp| type| source ---|---|--- 2026-07-10 00:35:04+00:00| published-proof-of-concept| https://github.com/osrg/gobgp/security/advisories/GHSA-frrj-87jh-2772...

Linux Distros Unpatched Vulnerability : CVE-2026-49838

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GoBGP confederation validation panics on empty ASPATH attribute CVE-2026-49838 Note that Nessus relies on the presence of the package as reported by the vendor...