CVE-2024-56169

A validation integrity issue was discovered in Fort through 1.6.4 before 2.0.0. RPKI Relying Parties (such as Fort) are supposed to maintain a backup cache of the remote RPKI data. This can be employed as a fallback in case a new fetch fails or yields incorrect files. However, the product currently uses its cache merely as a bandwidth saving tool (because fetching is performed through deltas). If a fetch fails midway or yields incorrect files, there is no viable fallback. This leads to incomplete route origin validation data.

• CWE-354

• https://github.com/NICMx/FORT-validator/issues/82Issue Tracking, Vendor Advisory
• https://nicmx.github.io/FORT-validator/CVE.htmlVendor Advisory

Published

Dec 18, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-56156Halo is an open source website building tool. Prior to versi…9
• CVE-2024-56157iTop is an web based IT Service Management tool. Prior to ve…6.3
• CVE-2024-56158XWiki is a generic wiki platform. It's possible to execute a…9.8
• CVE-2024-56159Astro is a web framework for content-driven websites. A bug …5.3
• CVE-2024-5616A Cross-Site Request Forgery (CSRF) vulnerability exists in …4.3
• CVE-2024-56161Improper signature verification in AMD CPU ROM microcode pat…7.2
• CVE-2024-56170A validation integrity issue was discovered in Fort through …5.3
• CVE-2024-56171libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-af…9.8
• CVE-2024-56173In Optimizely Configured Commerce before 5.2.2408, malicious…4.7
• CVE-2024-56174In Optimizely Configured Commerce before 5.2.2408, malicious…8.1
• CVE-2024-56175In Optimizely Configured Commerce before 5.2.2408, malicious…6.1
• CVE-2024-56178An issue was discovered in Couchbase Server 7.6.x through 7.…6.5