CVE-2026-72757

Routinator runs out of open connections on the HTTP server when many connections are opened but never closed, leaving the HTTP server unavailable. This condition can be triggered maliciously by an attacker by opening a large number of connections to the HTTP server. This only affects users that...

CVE-2026-72756

Routinator exits when an rsync URI for a file obtained over RRDP contains a path that cannot be stored on disk, such as too long file names, and folder names that overlap with existing file names...

CVE-2026-72758

When parsing an AS range in Routinator, if the maximum value of the range is smaller than the minimum value of the range, Routinator will never reach the maximum value and run out of memory...

CVE-2026-72754

When Routinator encounters a CRL with many entries, it may hang or run out of memory. If Routinator encounters a CRL file with the wrong encoding, it may exit...

CVE-2026-72755

Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentially overwriting a known good TA certificate even if validation fails...

CVE-2026-72752

Routinator runs out of memory when the JSON output is requested many times concurrently. This condition can be triggered maliciously by an attacker by opening a large number of connections to the HTTP server. Additionally Routinator runs into a stack overflow and exits when a payload item with to...

CVE-2026-72753

When Routinator encounters an RRDP notification file with gaps in the delta entries, it is still accepted and parsed, potentially leading to missing data. If it encounters too many delta entries it may run out of memory...

CVE-2026-72758 Routinator may exit on malformed ranges

When parsing an AS range in Routinator, if the maximum value of the range is smaller than the minimum value of the range, Routinator will never reach the maximum value and run out of memory...

CVE-2026-72758

The Routinator software is vulnerable to a memory exhaustion issue during the parsing of AS ranges . Specifically, if the maximum value of the provided range is smaller than the minimum value , the application fails to reach the exit condition and consumes all available memory. This flaw is categ...

EUVD-2026-110031

When parsing an AS range in Routinator, if the maximum value of the range is smaller than the minimum value of the range, Routinator will never reach the maximum value and run out of memory...

EUVD-2026-110030

Routinator runs out of open connections on the HTTP server when many connections are opened but never closed, leaving the HTTP server unavailable. This condition can be triggered maliciously by an attacker by opening a large number of connections to the HTTP server. This only affects users that...

CVE-2026-72757 Routinator HTTP server becomes unavailable with many unclosed connections

Routinator runs out of open connections on the HTTP server when many connections are opened but never closed, leaving the HTTP server unavailable. This condition can be triggered maliciously by an attacker by opening a large number of connections to the HTTP server. This only affects users that...

CVE-2026-72757

The Routinator software is vulnerable to a Denial of Service (DoS) condition where the HTTP server becomes unavailable. This occurs because an attacker can maliciously open a large number of connections that are never closed, causing the server to run out of available connections. This issue prim...

CVE-2026-72756 Routinator exits on malformed rsync URIs

Routinator exits when an rsync URI for a file obtained over RRDP contains a path that cannot be stored on disk, such as too long file names, and folder names that overlap with existing file names...

CVE-2026-72756

The Routinator software is susceptible to a denial-of-service condition where the application exits unexpectedly. This occurs when processing an rsync URI for a file obtained over RRDP that contains a path unsuitable for disk storage, such as excessively long filenames or folder names that confli...

EUVD-2026-110029

Routinator exits when an rsync URI for a file obtained over RRDP contains a path that cannot be stored on disk, such as too long file names, and folder names that overlap with existing file names...

CVE-2026-72755

The Routinator software contains a vulnerability where it stores a newly-retrieved TA certificate via HTTPS into its cache without performing proper validation. This flaw allows a potentially malicious certificate to overwrite a known good TA certificate, even if the initial validation fails. The...

CVE-2026-72755 Routinator stores TA certificate in cache without validation

Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentially overwriting a known good TA certificate even if validation fails...

EUVD-2026-110028

Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentially overwriting a known good TA certificate even if validation fails...

CVE-2026-72754

The Routinator software is susceptible to a vulnerability where processing a Certificate Revocation List (CRL) can lead to service instability. Specifically, encountering a CRL with a large number of entries may cause the application to hang or exhaust memory resources . Additionally, if the soft...