CVE-2026-72758
HIGHCVSS 7.5/10
Last modified
CVE-2026-72758 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. When parsing an AS range in Routinator, if the maximum value of the range is smaller than the minimum value of the range, Routinator will never reach the maximum value and run out of memory..
Description
When parsing an AS range in Routinator, if the maximum value of the range is smaller than the minimum value of the range, Routinator will never reach the maximum value and run out of memory.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| NLnet Labs | Routinator | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-72758?
When parsing an AS range in Routinator, if the maximum value of the range is smaller than the minimum value of the range, Routinator will never reach the maximum value and run out of memory.
How severe is CVE-2026-72758?
CVE-2026-72758 has a CVSS score of 7.5/10 (HIGH severity).
How do I fix CVE-2026-72758?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-72752Routinator runs out of memory when the JSON output is reques…6.5
- CVE-2026-72753When Routinator encounters an RRDP notification file with ga…8.2
- CVE-2026-72754When Routinator encounters a CRL with many entries, it may h…7.5
- CVE-2026-72755Routinator stores a newly-retrieved TA certificate via HTTPS…3.8
- CVE-2026-72756Routinator exits when an rsync URI for a file obtained over …7.5
- CVE-2026-72757Routinator runs out of open connections on the HTTP server w…5.3
- CVE-2026-72759In affected versions of MISP cti-transmute, the conversion-h…6.9
- CVE-2026-72760Affected versions of MISP cti-transmute disclose users' emai…5.3
- CVE-2026-72761The webhook URL validator in `website/notifications/webhooks…6.9
- CVE-2026-72762n8n versions before 1.123.67, 2.31.5, and 2.32.1 contain an …8.8
- CVE-2026-72763n8n before 1.123.67, 2.31.5, and 2.32.1 validates credential…6.5
- CVE-2026-72764n8n's JavaScript task runner shared a single module cache ac…8.8
Are you affected by CVE-2026-72758?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST