Input Validation Flaw in FRRouting Affects Network Performance
CVE-2026-37458

6.5MEDIUM

Key Information:

Vendor

FRRouting

Status
FRRouting
Vendor
CVE Published:
4 May 2026

What is CVE-2026-37458?

The MP_REACH_NLRI component in FRRouting versions stable/10.0 to stable/10.6 exhibits a flaw due to inadequate input validation. This vulnerability allows authenticated attackers to trigger a Denial of Service (DoS) by sending a specially crafted UPDATE message, potentially disrupting network performance. The issue highlights the importance of robust input validation mechanisms in network routing solutions.

References

https://github.com/FRRouting/frr/commit/8102a8aeceb9f86fd...
https://github.com/mertsatilmaz/vulnerability-research/bl...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.