3.8
LowCVSS 3.1 · from NLnet Labs
CVE-2026-72755
Routinator stores TA certificate in cache without validation
Routinator · CWE-755 · CWE-755AffectedRoutinator
FixUpdate to 0.15.3 or newer
PublishedOct 26, 17:06 · NLnet Labs
ScoredOct 26 · 3.8 · NLnet Labs
Exploit code publicNone known · checked 22:18 UTC
ExploitedNone known · CISA KEV checked 22:30 UTC
What we know
No known exploitation. CISA KEV, checked 22:30 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 22:18 UTC.
An attacker needs network access and an account. CVSS: network, high privileges.
Description
Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentially overwriting a known good TA certificate even if validation fails.
From NLnet Labs
Affected and fixed versions
ProductAffectedFixed inRoutinatorNot affected0.15.3
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known