tag
Routing
CVE-2026-49943
network
HIGH 3.1
BIRD/BIRD2 BGP AS_PATH Mask Matching Stack Buffer Overflow (CVE-2026-49943)
This repository documents a stack-based buffer overflow in BIRD's BGP ASPATH mask matching code (aspathmatch() in nest/a-path.c). The function uses a fixed-size stack array of 2048 + 1 pmpos entries, but parsepath() expands ASPATH segments from a received BGP…
Patched
2026-07-05
CVE-2025-54914
cloud
CRITICAL 10
Azure Networking Privilege Escalation via Missing Privilege Check
CVE-2025-54914 is a critical privilege escalation vulnerability (CVSS 10.0) in Microsoft Azure Networking. Discovered by Mark Mallia and disclosed on September 4, 2025, the flaw arises from a missing authorization check in the GetRouteTable API code path. A…
Patched
2026-05-17