CVE-2026-37460

Name: CVE-2026-37460 — Vulnerability Record
Brand: Quanteta Data Lab
SKU: CVE-2026-37460

No CVSS score published

Vendor advisory ref

Source data as of: 2026-06-04 05:00:10 UTC

At a glance

Severity: No CVSS score published
CVSS: No CVSS score in the NVD record
EPSS: EPSS not provided by FIRST.org for this CVE
CISA KEV: No
Published: 2026-06-03 · Modified: 2026-06-03
References: Jump to references (3)

CVSS / EPSS / KEV

EPSS — EPSS not provided by FIRST.org for this CVE Source: FIRST.org

CISA KEV No Source: CISA

Source — CVSS: NVD · EPSS: FIRST.org · KEV: CISA. Data & Sources

Description

Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.

Record details

CVE ID: CVE-2026-37460
CISA KEV: No
Affected configurations (CPE): 0
Published: 2026-06-03
Modified: 2026-06-03
Status: Received

References

Reference URLs as listed by NVD, grouped by a mechanical match on the link's host/pattern. Labels describe the link type only.

Reference https://github.com/FRRouting/frr
Patch https://github.com/FRRouting/frr/commit/7676cad65114aa23adde58
Reference https://github.com/FRRouting/frr/pull/21098%2C

← Back to all records