Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-112112

Quick assessment

Affected
nic BIRD
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

CZ.NIC BIRD 互联网路由守护进程中存在一个 IPv6 FlowSpec 验证绕过漏洞。该漏洞允许已建立的 BGP 对等体注入 FlowSpec 规则，这些规则可匹配单播路由验证流程未授权地址空间之外的目的地。当在接收的 flow6 通道上启用验证时，BIRD 未能拒绝带有非零偏移量的目的地前缀组件，这违反了 RFC 8956 第 5 节的规定。BIRD 会对重建后的前缀（将跳过的位填充为零）进行验证，而原始 FlowSpec 组件实际上可以匹配更广泛的 IPv6 地址集合。若对等体提供了合适的单播路由，该

CVSS 2.3 · Low EPSS 0.31% · P22

Affected Version Matrix 2

VendorProduct Version RangeStatus
nic BIRD 2.0.9≤ 2.20.0 affected
3.0.0≤ 3.4.0 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-112112

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an established BGP peer to inject FlowSpec rules matching destinations outside the address space authorized by the unicast-route validation procedure. With validation enabled on the receiving flow6 channel, BIRD fails to reject a destination prefix component with a nonzero offset, contrary to RFC 8956 section 5. It validates a reconstructed prefix with zero-filled skipped bits, although the original FlowSpec component can match a broader set of IPv6 addresses. Given a suitable unicast route from the peer, the rule can pass validation and, where export policy permits, be propagated to downstream peers. Downstream enforcement may cause unauthorized traffic filtering or redirection.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1284
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
nic BIRD 2.0.9 ~ 2.20.0 -

II. Public POCs for CVE-2026-112112

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-112112

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-112112 (1)

Other References for CVE-2026-112112 (2)

IV. Related Vulnerabilities

Same product: BIRD
Same vendor: nic
Same weakness: CWE-1284

V. Comments for CVE-2026-112112

No comments yet

Leave a comment