Live › vulnerability › CVE-2026-72756
Go to dashboardRoutinator, an RPKI validator, exits when an rsync URI obtained over RRDP contains a path that cannot be stored on disk, such as overly long file names or folder names that clash with existing file names. An attacker who controls a publication point can stop the validator from running.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 18:31 UTC. All times on this page are UTC.
Operators who run Routinator to validate RPKI data pulled from RRDP publication points. Exposure depends on the validator fetching from untrusted or third-party repositories; teams that do not run Routinator can skip it.
No product ranges from the sources yet.
routinator --version and compare it against the fixed release in the advisory.routinator --version and the configuration file; the sources do not give a config key.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Routinator exits when an rsync URI for a file obtained over RRDP contains a path that cannot be stored on disk, such as too long file names, and folder names that overlap with existing file names.
This page as .md · .json · in your agent: get_signal("CVE-2026-72756")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.