CVE-2026-110908

Netgate pfSense FRR package pfSense-pkg-frr 2.0.21 and source revision 2.1.21 contain an OS command injection vulnerability in the FRR status filter. An authenticated WebGUI user with only the page-status-frr privilege can supply a filter value that breaks out of a single-quoted sed expression in...

CVE-2026-110908

Netgate pfSense FRR package pfSense-pkg-frr 2.0.21 and source revision 2.1.21 contain an OS command injection vulnerability in the FRR status filter. An authenticated WebGUI user with only the page-status-frr privilege can supply a filter value that breaks out of a single-quoted sed expression in...

EUVD-2026-101816

Netgate pfSense FRR package pfSense-pkg-frr 2.0.21 and source revision 2.1.21 contain an OS command injection vulnerability in the FRR status filter. An authenticated WebGUI user with only the page-status-frr privilege can supply a filter value that breaks out of a single-quoted sed expression in...

CVE-2026-110908

Netgate pfSense FRR package pfSense-pkg-frr 2.0.21 and source revision 2.1.21 contain an OS command injection vulnerability in the FRR status filter. An authenticated WebGUI user with only the page-status-frr privilege can supply a filter value that breaks out of a single-quoted sed expression in...

CVE-2026-110908

The Netgate pfSense FRR package (pfSense-pkg-frr) versions 2.0.2_1 and source revision 2.1.2_1 are vulnerable to an OS command injection in the FRR status filter. An authenticated WebGUI user with page-status-frr privileges can provide a filter value that breaks out of a single-quoted sed express...

PT-2026-114440

Name of the Vulnerable Software and Affected Versions Netgate pfSense FRR package pfSense-pkg-frr versions 2.0.2 1 and 2.1.2 1 Description An authenticated WebGUI user with page-status-frr privileges can perform OS command injection through the FRR status filter. The issue occurs when a filter...

CVE-2026-110908: Improper Neutralization of Special Elements used in an OS Command

Netgate pfSense FRR package pfSense-pkg-frr 2.0.21 and source revision 2.1.21 contain an OS command injection vulnerability in the FRR status filter. An authenticated WebGUI user with only the page-status-frr privilege can supply a filter value that breaks out of a single-quoted sed expression in...

Netgate pfSense-pkg-frr command injection vulnerability

The Netgate pfSense-pkg-frr 2.0.21 and 2.1.21 versions have a command injection vulnerability. This vulnerability stems from OS command injection within the FRR status filter. Certified WebGUI users with page-status-frr privileges can exploit this vulnerability by providing filter values that bre...

CLEANSTART-2025-RF72378 buffer overflow vulnerability exists in FRRouting through 8

Security vulnerability affects the frr package. A buffer overflow vulnerability exists in FRRouting through 8...

CLEANSTART-2025-HP01614 buffer overflow vulnerability exists in FRRouting through 8

Security vulnerability affects the frr package. A buffer overflow vulnerability exists in FRRouting through 8...

CLEANSTART-2025-TL74992 Buffer overflow vulnerabilities exist in FRRouting through 8

Security vulnerability affects the frr package. Buffer overflow vulnerabilities exist in FRRouting through 8...

CLEANSTART-2025-DQ89362 Buffer overflow vulnerabilities exist in FRRouting through 8

Security vulnerability affects the frr package. Buffer overflow vulnerabilities exist in FRRouting through 8...

Rocky Linux 9 [CIQ] Security Update: frr / frr-debuginfo / frr-debugsource / frr-selinux (crlsa-2026_24371)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202624371 advisory. frr: denial of service via crafted FlowSpec component CVE-2026-37457 Tenable has extracted the preceding description block directly from the CIQ security advisory...

Rocky Linux 8.6 [CIQ] Security Update: frr / frr-debuginfo / frr-debugsource / frr-selinux Multiple Vulnerabilities (ciqsa-2026_0047)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260047 advisory. This advisory aggregates security fixes for the frr SRPM in CIQ LTS 8.6. It addresses 8 CVEs: CVE-2023-31490, CVE-2022-37032, CVE-2023-38406,...

Rocky Linux 9 [CIQ] Security Update: frr10 / frr10-debuginfo / frr10-debugsource / frr10-selinux (crlsa-2026_49607)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202649607 advisory. frr: FRRouting: Denial of Service via crafted BGP UPDATE message CVE-2026-37460 Bug Fixes and Enhancements: frr10 triggers SELinux denials when reading root's Pyth...

AlmaLinux 9.6 [TuxCare] Security Update: frr / frr-selinux (ALMALINUX9.6:CLSA-2026:1781626852)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1781626852 advisory. - An off-by-one out-of-bounds write vulnerability in the bgpflowspecopdecode function bgpd/bgpflowspecutil.c of FRRouting FRR stable/10.0...

AlmaLinux 9.6 [TuxCare] Security Update: frr / frr-selinux (ALMALINUX9.6:CLSA-2026:1786095204)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1786095204 advisory. - Missing input validation in the rfapiRibBi2Ri function rfapirib.c of FRRouting FRR stable/10.0 to stable/10.6 allows attackers to cause a...

Rocky Linux 9.2 [CIQ] Security Update: frr / frr-debuginfo / frr-debugsource / frr-selinux Multiple Vulnerabilities (ciqsa-2026_0417)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260417 advisory. This advisory aggregates security fixes for the frr SRPM in CIQ LTS 9.2. It addresses 4 CVEs: CVE-2022-36440, CVE-2022-40302, CVE-2022-40318,...

Rocky Linux 10.2 [CIQ] Security Update: frr / frr-debuginfo / frr-debugsource / frr-selinux Multiple Vulnerabilities (crlsa-2026_24347)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202624347 advisory. frr: denial of service via crafted FlowSpec component CVE-2026-37457 frr: denial of service via crafted BGP UPDATE message CVE-2026-37459 Tenable has...

Rocky Linux 9 [CIQ] Security Update: frr10 / frr10-debuginfo / frr10-debugsource / frr10-selinux Multiple Vulnerabilities (crlsa-2026_24370)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202624370 advisory. frr: denial of service via crafted FlowSpec component CVE-2026-37457 frr: denial of service via crafted BGP UPDATE message CVE-2026-37459 Tenable has...