Medium severity · published Mar 30, 2026
CVE-2026-5107
FRRouting FRR EVPN Type-2 Route bgp_evpn.c process_type2_route access control
4.2
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability has been found in FRRouting FRR up to 10.5.1. This affects the function process_type2_route of the file bgpd/bgp_evpn.c of the component EVPN Type-2 Route Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The attack is considered to have high complexity. The exploitability is reported as difficult. The identifier of the patch is 7676cad65114aa23adde583d91d9d29e2debd045. To fix this issue, it is recommended to deploy a patch.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L
Attack vector
Network
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 21% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FR
FRR · FRRouting
10.5.0; 10.5.1 · source: vendor
FR
Frrouting · Frrouting
10.5.0; 10.5.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-5107
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-5107
Product
https://github.com/FRRouting/frr/
Patch
https://github.com/FRRouting/frr/commit/7676cad65114aa23adde583d91d9d29e2debd045
Issue Tracking
https://github.com/FRRouting/frr/pull/21098
Third Party Advisory
https://vuldb.com/submit/780123
Third Party Advisory
https://vuldb.com/vuln/354132
Permissions Required
https://vuldb.com/vuln/354132/cti
More from FRR
6.5
CVE-2026-28532
FRRouting < 10.5.3 Integer Overflow in OSPF TLV Parser Functions