---
id: "CVE-2026-72753"
kind: "vulnerability"
aliases: ["CVE-2026-72753"]
title: "Routinator: RRDP delta gaps accepted, and many deltas can exhaust memory"
severity: "high"
cvss: 8.2
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "network-operators", "routinator", "rpki"]
not_affected_if: []
published_at: "2026-10-26T18:18:40+00:00"
first_seen_at: "2026-10-26T18:31:44+00:00"
updated_at: "2026-10-26T18:33:39+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-72753", "first_seen_at": "2026-10-26T18:31:44+00:00"}]
---

# Routinator: RRDP delta gaps accepted, and many deltas can exhaust memory

Routinator, an RPKI validator, accepts an RRDP notification file that has gaps in its delta entries and parses it anyway, which can lead to missing routing data. A notification file with too many delta entries can also make it run out of memory.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- unknown

## Fix

- unknown

## Timeline

- 2026-10-26T18:31:44+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-72753

## From the sources

When Routinator encounters an RRDP notification file with gaps in the delta entries, it is still accepted and parsed, potentially leading to missing data. If it encounters too many delta entries it may run out of memory.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_