PT-2026-28761 · Frrouting+2 · Frrouting Frr+2

Rensiru · Publicado 2026-03-30 · Atualizado 2026-06-03 · CVE-2026-5107

Positive Technologies (AI Summary)

CVSS v3.1

4.2

Média

Vetor base

AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions FRRouting FRR versions up to 10.5.1

Description A security issue exists in FRRouting FRR related to improper access controls within the EVPN Type-2 Route Handler component. The issue is located in the process type2 route function of the bgpd/bgp evpn.c file. The attack can be initiated remotely and is considered difficult to exploit.

Recommendations Deploy a patch to address this issue.

Correção

Incorrect Privilege Assignment

Improper Access Control

Enumeração de Fraquezas

CWE-266

CWE-284

Identificadores relacionados

CVE-2026-5107

OPENSUSE-SU-2026:10606-1

SUSE-SU-2026:22026-1

USN-8175-1

Produtos afetados

Frrouting Frr

Linuxmint

Ubuntu

Referências · 27

• https://github.com/FRRouting/frr/commit/7676cad65114aa23adde583d91d9d29e2debd045 · Correção
• https://github.com/FRRouting/frr/pull/21098 · Correção
• https://security-tracker.debian.org/tracker/CVE-2026-5107 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2026:10606-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-28532 · Nota
• https://bugzilla.suse.com/1263863 · Nota
• https://ubuntu.com/security/CVE-2026-5107 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2026:22026-1 · Aviso do Fabricante
• https://twitter.com/cyberbivash/status/2038525882327769155 · Publicação no Twitter
• https://suse.com/security/cve/CVE-2026-37457 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-5107 · Aviso do Fabricante
• https://bugzilla.suse.com/1261013 · Nota
• https://suse.com/security/cve/CVE-2026-37458 · Nota
• https://suse.com/support/update/announcement/2026/suse-su-202622026-1 · Nota
• https://vuldb.com/vuln/354132/cti · Nota