A vulnerability has been found in FRRouting FRR up to 10.5.1. This affects the function process_type2_route of the file bgpd/bgp_evpn.c of the component EVPN Type-2 Route Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The attack is considered to have high complexity. The exploitability is reported as difficult. The identifier of the patch is 7676cad65114aa23adde583d91d9d29e2debd045. To fix this issue, it is recommended to deploy a patch.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20682-1 advisory.

    Security issues:

    - CVE-2025-61099: NULL Pointer Dereference in FRRouting (bsc#1252838).
    - CVE-2025-61100: NULL Pointer Dereference in FRRouting (bsc#1252829).
    - CVE-2025-61101: NULL Pointer Dereference in FRRouting (bsc#1252833).
    - CVE-2025-61102: NULL Pointer Dereference in FRRouting (bsc#1252835).
    - CVE-2025-61103: NULL pointer dereference in show_vty_ext_link_lan_adj_sid() in ospf_ext.c (bsc#1252810).
    - CVE-2025-61104: NULL pointer dereference in show_vty_unknown_tlv() in ospf_ext.c (bsc#1252811).
    - CVE-2025-61105: FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer     dereference via the       show_vty_link_info function at ospf_ext.c (bsc#1252761).
    - CVE-2025-61106: NULL pointer dereference in show_vty_ext_pref_pref_sid() in ospf_ext.c (bsc#1252812).
    - CVE-2025-61107: NULL pointer dereference in show_vty_ext_pref_pref_sid() in ospf_ext.c (bsc#1252813).
    - CVE-2026-5107: A vulnerability has been found in FRRouting FRR up to 10.5.1. This affects the function       process_type2_route of the file bgpd/bgp_evpn.c of the component EVPN Type-2 Route Handler. The     manipulation leads to       improper a (bsc#1261013).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by a vulnerability as referenced in the USN-8175-1 advisory.

    It was discovered that FRR did not correctly handle certain network requests. A remote attacker could     possibly use this issue to gain unauthorized access to resources.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability has been found in FRRouting FRR up to 10.5.1. This affects the function     process_type2_route of the file bgpd/bgp_evpn.c of the component EVPN Type-2 Route Handler. The     manipulation leads to improper access controls. The attack can be initiated remotely. The attack is     considered to have high complexity. The exploitability is reported as difficult. The identifier of the     patch is 7676cad65114aa23adde583d91d9d29e2debd045. To fix this issue, it is recommended to deploy a patch.
    (CVE-2026-5107)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
313695	openSUSE 16 Security Update : frr (openSUSE-SU-2026:20682-1)	Nessus	SuSE Local Security Checks	low
306723	Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 : FRR vulnerability (USN-8175-1)	Nessus	Ubuntu Local Security Checks	low
304341	Linux Distros Unpatched Vulnerability : CVE-2026-5107	Nessus	Misc.	low

Detections

Analytics

CVE-2026-5107

low

Tenable Plugins

low

low

low