FRRouting Vulnerability Allows Remote Data Manipulation

CERT-Bund published advisory WID-SEC-2026-0914 detailing a data manipulation vulnerability in FRRouting, a widely used open-source Internet routing protocol suite for Linux and UNIX. The flaw carries a CVSS Base Score of 4.2 (Medium) and a Temporal Score of 3.7 (Low). Affected product: FRRouting Project FRRouting <=10.5.1. The vulnerability enables a remote, authenticated attacker to manipulate data on affected systems. A mitigation has been confirmed available by the vendor.

Organizations running FRRouting on Linux or UNIX must immediately inventory their deployments for affected versions (10.5.1 and earlier), apply the provided mitigations, and monitor for forthcoming patches. Priority should be given to systems exposed to untrusted network segments, as the attack requires authentication but can be executed remotely. No specific compliance deadline or penalty is stated in the advisory.