CVE-2026-72755

CVSS 3.8 (low) · published 2026-10-26

Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentially overwriting a known good TA certificate even if validation fails.

Weakness: CWE-755

Source: NVD CVE-2026-72755

References

• https://www.nlnetlabs.nl/downloads/routinator/CVE-2026-72755.txt

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.