CVE-2026-7736

osrg · GoBGP

A security vulnerability has been identified in the osrg GoBGP software that may impact network routing security and stability.

Executive summary

A high-severity vulnerability in osrg GoBGP could potentially be exploited to disrupt network routing, posing a risk to infrastructure availability.

Vulnerability

This vulnerability exists within the GoBGP implementation, potentially affecting how routing information is processed and secured against unauthorized manipulation.

Business impact

With a CVSS score of 7.3, this vulnerability represents a high risk to network reliability. Exploitation could result in BGP routing instability, leading to potential service outages or traffic redirection, which could cause significant operational downtime.

Remediation

Immediate Action: Update the GoBGP implementation to the latest version provided by the project maintainers.

Proactive Monitoring: Monitor BGP peering logs and routing table changes for signs of unexpected or unauthorized manipulation.

Compensating Controls: Implement strict peer authentication and prefix filtering to limit the impact of potential BGP-related vulnerabilities.

Exploitation status

Public Exploit Available: false

Analyst recommendation

The potential for network-wide disruption makes this a high-priority issue. Administrators should move quickly to update their GoBGP instances and ensure that all routing security best practices are strictly enforced.