CVE-2026-37458 | THREATINT

Description

Missing input validation in the MP_REACH_NLRI component of FRRouting (FRR) stable/10.0 to stable/10.6 allows authenticated attackers to cause a Denial of Service (DoS) via supplying a crafted UPDATE message.

PUBLISHED Reserved 2026-04-06 | Published 2026-05-04 | Updated 2026-05-05 | Assigner mitre

References

github.com/...ommit/8102a8aeceb9f86fdfe1f80cd77080522bab69c8

github.com/...esearch/blob/main/advisories/CVE-2026-36365.md

cve.org (CVE-2026-37458)

nvd.nist.gov (CVE-2026-37458)

Download JSON