Skip to content
CVE PROGRAM SOURCE RECORD3.8 Low

CVE-2026-72755

Routinator stores TA certificate in cache without validation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NLnet Labs

Description

Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentially overwriting a known good TA certificate even if validation fails.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NLnet Labs Routinator

Default version status: affected

  • 0.15.3 to < *unaffected

References