osrg GoBGP BMP Parser bmp.go BMPStatisticsReport.ParseBody out-of-bounds

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-7737 · Microsoft / collected KEV context

EUVD-2026-26917

GHSA-w88c-9vg8-cmq8

GO-2026-5699

cve-program · CVE-2026-7737

• https://vuldb.com/vuln/360912
• https://vuldb.com/vuln/360912/cti
• https://vuldb.com/submit/807605
• https://github.com/osrg/gobgp/commit/bc77597d42335c78464bc8e15a471d887bbdf260
• https://github.com/osrg/gobgp/releases/tag/v4.4.0
• https://github.com/osrg/gobgp/

euvd · EUVD-2026-26917

• https://vuldb.com/vuln/360912
• https://vuldb.com/vuln/360912/cti
• https://vuldb.com/submit/807605
• https://github.com/osrg/gobgp/commit/bc77597d42335c78464bc8e15a471d887bbdf260
• https://github.com/osrg/gobgp/releases/tag/v4.4.0
• https://github.com/osrg/gobgp/

nvd · CVE-2026-7737

• https://github.com/osrg/gobgp/
• https://github.com/osrg/gobgp/commit/bc77597d42335c78464bc8e15a471d887bbdf260
• https://github.com/osrg/gobgp/releases/tag/v4.4.0
• https://vuldb.com/submit/807605
• https://vuldb.com/vuln/360912
• https://vuldb.com/vuln/360912/cti

osv · GHSA-w88c-9vg8-cmq8

• https://nvd.nist.gov/vuln/detail/CVE-2026-7737
• https://github.com/osrg/gobgp/commit/bc77597d42335c78464bc8e15a471d887bbdf260
• https://github.com/osrg/gobgp
• https://github.com/osrg/gobgp/releases/tag/v4.4.0
• https://vuldb.com/submit/807605
• https://vuldb.com/vuln/360912
• https://vuldb.com/vuln/360912/cti

osv · GO-2026-5699

• https://github.com/advisories/GHSA-w88c-9vg8-cmq8
• https://github.com/osrg/gobgp/commit/bc77597d42335c78464bc8e15a471d887bbdf260
• https://github.com/osrg/gobgp/releases/tag/v4.4.0
• https://vuldb.com/submit/807605
• https://vuldb.com/vuln/360912
• https://vuldb.com/vuln/360912/cti

No related operational record is retained in the current change model.