VulnerabilityAnalyzed
CVE-2026-5107
A vulnerability has been found in FRRouting FRR up to 10.5.1.
LOW 2.3EPSS 0.28%
Does this matter?
Lower severity and a low EPSS score (0.28%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability has been found in FRRouting FRR up to 10.5.1. This affects the function process_type2_route of the file bgpd/bgp_evpn.c of the component EVPN Type-2 Route Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The attack is considered to have high complexity. The exploitability is reported as difficult. The identifier of the patch is 7676cad65114aa23adde583d91d9d29e2debd045. To fix this issue, it is recommended to deploy a patch.
- CVSS 4.0
- 2.3 LOWCVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.28% probability · 20th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-266, CWE-284
- Affected
- frrouting/frrouting
- Source
- cna@vuldb.com
References
- https://github.com/FRRouting/frr/Product
- https://github.com/FRRouting/frr/commit/7676cad65114aa23adde583d91d9d29e2debd045Patch
- https://github.com/FRRouting/frr/pull/21098Issue Tracking, Patch
- https://vuldb.com/submit/780123Third Party Advisory, VDB Entry
- https://vuldb.com/vuln/354132Third Party Advisory, VDB Entry
- https://vuldb.com/vuln/354132/ctiPermissions Required, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.