Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A weakness has been identified in osrg GoBGP up to 4.3.0. This impacts the function DecodeFromBytes of the file pkg/packet/bgp/bgp.go. Executing a manipulation of the argument data[1] can lead to off-by-one. The attack may be launched remotely. Attacks of this nature are highly complex. The exploitability is said to be difficult. This patch is called 67c059413470df64bc20801c46f64058e88f800f. A patch should be applied to remediate this issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-30 | 1 | Disclosure1 |
| 2026-03-31 | 2 | Disclosure2 |
CVE-2026-5123 A weakness has been identified in osrg GoBGP up to 4.3.0. This impacts the function DecodeFromBytes of the file pkg/packet/bgp/bgp.go. Executing a manipulation of the a… https://www.cve.org/CVERecord?id=CVE-2026-5123
Post summary
The text announces a weakness in OSRG GoBGP up to version 4.3.0 affecting the DecodeFromBytes function, providing technical details and linking to the CVE record for further information.
🚨*CVE* CVE-2026-5123 A weakness has been identified in osrg GoBGP up to 4.3.0. This impacts the function DecodeFromBytes of the file pkg/packet/bgp/bgp.go. Executing a manipulation of the a… https://www.cve.org/CVERecord?id=CVE-2026-5123 ----- Traducción: CVE-2026-5123 Se … http://infoflow.cloud`
Post summary
The tweet announces a discovered weakness in osrg GoBGP, providing limited technical details without indicating exploitation or remediation steps.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-5123 - osrg GoBGP bgp.go DecodeFromBytes off-by-one Intel Report: https://ift.tt/07JAUtY
Post summary
A new vulnerability, CVE-2026-5123, an off‑by‑one error in osrg GoBGP, has been announced with an Intel report linked, but no exploitation or patch details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | osrg | gobgp | - | - | - |