CVE-2026-37458

Published May 4th, 2026

View on NVD ↗

CVSS v3

6.5

MEDIUM

CVSS v2

N/A

Affected

PROJECTS

Description

Missing input validation in the MP_REACH_NLRI component of FRRouting (FRR) stable/10.0 to stable/10.6 allows authenticated attackers to cause a Denial of Service (DoS) via supplying a crafted UPDATE message.

FRRouting/frr

The FRRouting Protocol Suite

GitHub

4.16K

mertsatilmaz/vulnerability-research

Public vulnerability advisories, CVE references, and responsible disclosure notes by Mert Satilmaz.

GitHub