CVE-2026-41642 POC (Proof-of-Concept)

GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. In version 4.3.0, a remote Denial of Service (DoS) vulnerability exists in GoBGP due to a nil pointer dereference. When a malformed BGP UPDATE message contains an unrecognized Path Attribute marked as "Well-known," the daemon fails to interrupt the message handling flow. This results in an illegal memory access and a full process crash (panic). This issue has been patched in version 4.4.0.

Published: 2026-05-07

CVSS: 7.5

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Download CVE-2026-41642 POC (Proof-of-Concept) here:

Tip: Download official Tor Browser at https://www.torproject.org/download/ to access .onion links.

https://hokyo.gr/poc-442-cve-2026-23926/

https://hokyo.gr/poc-547-cve-2026-20167/

https://hokyo.gr/poc-289-cve-2026-42154/

https://hokyo.gr/poc-448-cve-2026-43074/

https://hokyo.gr/poc-392-cve-2026-25588/