CVE-2026-72753
HIGHCVSS 8.2/10
Last modified
CVE-2026-72753 is a high-severity vulnerability rated 8.2/10 on the CVSS scale. When Routinator encounters an RRDP notification file with gaps in the delta entries, it is still accepted and parsed, potentially leading to missing data. If it encounters too many delta entries it may run out of memory..
Description
When Routinator encounters an RRDP notification file with gaps in the delta entries, it is still accepted and parsed, potentially leading to missing data. If it encounters too many delta entries it may run out of memory.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| NLnet Labs | Routinator | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-72753?
When Routinator encounters an RRDP notification file with gaps in the delta entries, it is still accepted and parsed, potentially leading to missing data. If it encounters too many delta entries it may run out of memory.
How severe is CVE-2026-72753?
CVE-2026-72753 has a CVSS score of 8.2/10 (HIGH severity).
How do I fix CVE-2026-72753?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-72747AVideo fails to sanitize the phone field during user registr…7.2
- CVE-2026-72748AVideo contains an unauthenticated arbitrary file write vuln…9.1
- CVE-2026-72749n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype…6.5
- CVE-2026-72750n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injec…8.8
- CVE-2026-72751CTI-Transmute is affected by a stored cross-site scripting (…5.1
- CVE-2026-72752Routinator runs out of memory when the JSON output is reques…6.5
- CVE-2026-72754When Routinator encounters a CRL with many entries, it may h…7.5
- CVE-2026-72755Routinator stores a newly-retrieved TA certificate via HTTPS…3.8
- CVE-2026-72756Routinator exits when an rsync URI for a file obtained over …7.5
- CVE-2026-72757Routinator runs out of open connections on the HTTP server w…5.3
- CVE-2026-72758When parsing an AS range in Routinator, if the maximum value…7.5
- CVE-2026-72759In affected versions of MISP cti-transmute, the conversion-h…6.9
Are you affected by CVE-2026-72753?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST