Live › vulnerability › CVE-2026-72754
Go to dashboardRoutinator, an RPKI validator, hangs or runs out of memory when it processes a certificate revocation list (CRL) with many entries. A malformed CRL with the wrong encoding can also make it exit.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 18:31 UTC. All times on this page are UTC.
Operators who run Routinator to validate RPKI data from publication repositories are exposed, since the flaw is triggered by the CRL contents those repositories serve. Teams that only consume validated output from a third-party validator and do not run Routinator can skip it.
No product ranges from the sources yet.
routinator --version.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
When Routinator encounters a CRL with many entries, it may hang or run out of memory. If Routinator encounters a CRL file with the wrong encoding, it may exit.
This page as .md · .json · in your agent: get_signal("CVE-2026-72754")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.