CVE-2026-72757
Last modified
CVE-2026-72757 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. Routinator runs out of open connections on the HTTP server when many connections are opened but never closed, leaving the HTTP server unavailable. This condition can be triggered maliciously by an attacker by opening a large number of connections to the HTTP server. This only affects users that make their HTTP or RTR server available to untrusted networks..
Description
Routinator runs out of open connections on the HTTP server when many connections are opened but never closed, leaving the HTTP server unavailable. This condition can be triggered maliciously by an attacker by opening a large number of connections to the HTTP server. This only affects users that make their HTTP or RTR server available to untrusted networks.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| NLnet Labs | Routinator | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-72757?
How severe is CVE-2026-72757?
How do I fix CVE-2026-72757?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-72751CTI-Transmute is affected by a stored cross-site scripting (…5.1
- CVE-2026-72752Routinator runs out of memory when the JSON output is reques…6.5
- CVE-2026-72753When Routinator encounters an RRDP notification file with ga…8.2
- CVE-2026-72754When Routinator encounters a CRL with many entries, it may h…7.5
- CVE-2026-72755Routinator stores a newly-retrieved TA certificate via HTTPS…3.8
- CVE-2026-72756Routinator exits when an rsync URI for a file obtained over …7.5
- CVE-2026-72758When parsing an AS range in Routinator, if the maximum value…7.5
- CVE-2026-72759In affected versions of MISP cti-transmute, the conversion-h…6.9
- CVE-2026-72760Affected versions of MISP cti-transmute disclose users' emai…5.3
- CVE-2026-72761The webhook URL validator in `website/notifications/webhooks…6.9
- CVE-2026-72762n8n versions before 1.123.67, 2.31.5, and 2.32.1 contain an …8.8
- CVE-2026-72763n8n before 1.123.67, 2.31.5, and 2.32.1 validates credential…6.5
Are you affected by CVE-2026-72757?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST