CVE-2026-72753
Deferred
Deferred - Pending Action
RRDNS Gap Handling Memory Exhaustion in Routinator
Vulnerability report for CVE-2026-72753, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-26
Last updated on: 2026-10-26
Assigner: NLnet Labs
Description
Description
When Routinator encounters an RRDP notification file with gaps in the delta entries, it is still accepted and parsed, potentially leading to missing data. If it encounters too many delta entries it may run out of memory.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| nlnetlabs | routinator | to 0.15.2 (inc) |
| nlnetlabs | routinator | From 0.15.3 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-755 | The product does not handle or incorrectly handles an exceptional condition. |