CVE-2026-72753 Details
Description
When Routinator encounters an RRDP notification file with gaps in the delta entries, it is still accepted and parsed, potentially leading to missing data. If it encounters too many delta entries it may run out of memory.
A vulnerability exists in Routinator versions prior to and including 0.15.2, where the application improperly processes RRDP notification files with missing delta entries. This flaw can lead to incomplete data being parsed. Additionally, if an excessive number of delta entries are encountered, Routinator may exhaust available memory, causing potential disruptions.
Users are advised to upgrade to Routinator version 0.15.3 or later.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 26, 2026CISA-ADP
Assessed Oct 26, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.nlnetlabs.nl/downloads/routinator/CVE-2026-72753.txt | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-755 | Improper Handling of Exceptional Conditions | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| NLnet Labs Routinator | <= 0.15.2 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 26, 2026 | New CVE Received | [email protected] |
| Oct 26, 2026 | CVE Modified | CISA-ADP |