CVE-2026-72755

Description

Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentially overwriting a known good TA certificate even if validation fails.

References

https://www.nlnetlabs.nl/downloads/routinator/CVE-2026-72755.txt

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-110028

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS