Live › vulnerability › CVE-2026-72753
Go to dashboardRoutinator, an RPKI validator, accepts an RRDP notification file that has gaps in its delta entries and parses it anyway, which can lead to missing routing data. A notification file with too many delta entries can also make it run out of memory.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 18:31 UTC. All times on this page are UTC.
Operators who run Routinator to validate RPKI data for routing decisions are the ones affected. The sources do not say which versions are vulnerable or whether a default configuration is exposed, so unknown.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
When Routinator encounters an RRDP notification file with gaps in the delta entries, it is still accepted and parsed, potentially leading to missing data. If it encounters too many delta entries it may run out of memory.
This page as .md · .json · in your agent: get_signal("CVE-2026-72753")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.