← All advisories

High severity7.5NVD Advisory· Published Mar 16, 2026· Updated Jun 17, 2026

CVE-2026-30405

CVE-2026-30405

Description

An issue in GoBGP gobgpd v.4.2.0 allows a remote attacker to cause a denial of service via the NEXT_HOP path attribute

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6

osv-coords5 versions
pkg:apk/chainguard/kube-vip-fips pkg:apk/chainguard/kube-vip pkg:apk/wolfi/kube-vip pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Leap%2016.0 pkg:golang/github.com/osrg/gobgp/v4
< 1.2.1-r0+ 4 more
- (no CPE)range: < 1.2.1-r0
- (no CPE)range: < 1.2.1-r0
- (no CPE)range: < 1.2.1-r0
- (no CPE)range: < 0.0.20260723T184607-160000.1.1
- (no CPE)range: <= 4.3.0
Osrg/Gobgp
cpe:2.3:a:osrg:gobgp:4.2.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

5

github.com/osrg/gobgp/issues/3305nvdExploitIssue TrackingVendor Advisory
github.com/advisories/GHSA-4p9m-8gc4-rw2hghsaADVISORY
github.com/osrg/gobgp/commit/583080a7258e22cc884162e15b078771aa2c2c80ghsa
github.com/osrg/gobgp/releases/tag/v4.4.0ghsa
nvd.nist.gov/vuln/detail/CVE-2026-30405ghsa

News mentions

0

No linked articles in our index yet.