bgp flowspec

CVE-2026-37457 is a high-severity denial-of-service flaw disclosed in May 2026 in FRRouting’s BGP FlowSpec handling, where a crafted FlowSpec component can trigger an off-by-one out-of-bounds write in bgp_flowspec_op_decode() within bgpd/bgp_flowspec_util.c. The bug is not a Windows...