# CVE-2026-37460: FRRouting Denial of Service in rfapiRibBi2Ri function

Source: https://junglewise.ai/threats/cve-2026-37460-frrouting-denial-of-service-in-rfapiribbi2ri-function  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-03. Updated: 2026-06-03  
License: CC BY 4.0 with a link back

CVE-2026-37460 · Severity: info · CVSS 0 · Published 2026-06-03

A vulnerability in FRRouting, a popular open-source routing protocol suite, could allow an attacker to crash the routing service. By sending a specially crafted network update message, an attacker can trigger a denial-of-service condition, potentially disrupting network connectivity and data flow across the infrastructure.

Technologies: [Frrouting](https://junglewise.ai/threats/technologies/frrouting). Vendors: [Frrouting](https://junglewise.ai/threats/vendors/frrouting).

## Quick answers

**Is CVE-2026-37460 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-37460 being exploited in the wild.

**How severe is CVE-2026-37460?** Informational severity, with a CVSS score of 0, published 3 June 2026.

**Which products and versions are affected?** Frrouting stable/10.0 to stable/10.6.

**Is there a fix for CVE-2026-37460?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-37460 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-37460?** Check whether you run Frrouting at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A vulnerability exists in the rfapiRibBi2Ri() function within rfapi_rib.c of FRRouting (FRR) versions stable/10.0 through stable/10.6. The flaw is caused by insufficient input validation when handling BGP UPDATE messages, specifically related to EVPN and ENCAP/VNC packet parsing. A remote attacker can exploit this by sending a crafted BGP UPDATE message to a vulnerable instance, leading to a service crash (Denial of Service). A fix has been identified in the project's source code repository to improve packet validation.

## Affected products

- FRRouting FRRouting stable/10.0 to stable/10.6

## Timeline

- 2026-06-03: disclosed
- 2026-06-03: advisory

## References

- [https://github.com/FRRouting/frr](https://github.com/FRRouting/frr)
- [https://github.com/FRRouting/frr/commit/7676cad65114aa23adde58](https://github.com/FRRouting/frr/commit/7676cad65114aa23adde58)
- [https://github.com/FRRouting/frr/pull/21098%2C](https://github.com/FRRouting/frr/pull/21098%2C)

## Related threats

- [FRRouting OSPFv3 spoofed packet acceptance](https://junglewise.ai/threats/cve-2026-119776-in-all-prior-released-versions-of-frrouting-the-ospfv3-for-ipv6)
- [FRRouting integer underflow in BGP UPDATE message parsing](https://junglewise.ai/threats/cve-2026-37459-frrouting-integer-underflow-in-bgp-update-message-parsing)
- [FRRouting FRR denial of service in MP_REACH_NLRI component](https://junglewise.ai/threats/cve-2026-37458-frrouting-frr-denial-of-service-in-mp-reach-nlri-component)
- [FRRouting FRR out-of-bounds write in bgp_flowspec_op_decode](https://junglewise.ai/threats/cve-2026-37457-frrouting-frr-out-of-bounds-write-in-bgp-flowspec-op-decode)
- [FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment…](https://junglewise.ai/threats/cve-2026-28532-frrouting-before-10-5-3-contains-an-integer-overflow)