Skip to content
OpenAdvisories
Medium USN-8175-1 1 CVE

frr vulnerability

Published Apr 15, 2026 · Updated Jun 16, 2026

Ecosystem: Ubuntu

Summary

It was discovered that FRR did not correctly handle certain network
requests. A remote attacker could possibly use this issue to gain
unauthorized access to resources.

Fixed packages 4

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS frr 8.1-1ubuntu1.15
Ubuntu · 24.04 LTS 24.04:LTS frr 8.4.4-1.1ubuntu6.6
Ubuntu · 25.10 frr 10.4.1-3ubuntu1.2
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS frr 7.2.1-1ubuntu0.2+esm4

Vulnerabilities 1

  • Medium 4.2
    CVE-2026-5107

    FRRouting FRR EVPN Type-2 Route bgp_evpn.c process_type2_route access control

    A vulnerability has been found in FRRouting FRR up to 10.5.1. This affects the function process_type2_route of the file bgpd/bgp_evpn.c of the component EVPN Type-2 Route Handler. The manipulation leads to improper access controls. The attack can be initiated…

    FRRouting FRR frr frr Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2026-5107