{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3anlnet_labsroutinator/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:nlnetlabs:routinator:*:*:*:*:*:*:*:*","cpe:2.3:a:nlnet_labs:routinator:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.2,"id":"CVE-2026-72753"},{"cvss":7.5,"id":"CVE-2026-72754"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Routinator"],"_cs_severities":["medium"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["NLnet Labs"],"content_html":"\u003cp\u003eCVE-2026-72753 describes a vulnerability in Routinator's RRDP notification file handling. When the software encounters an RRDP notification file containing gaps in delta entries, it improperly accepts and parses the file, resulting in potential data inconsistency. Furthermore, processing an excessive number of delta entries within a single file can lead to memory exhaustion, resulting in a denial-of-service condition.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for a denial-of-service condition via resource exhaustion (memory). Additionally, improper validation of delta gaps can result in the RPKI cache failing to synchronize correctly, leading to missing validation data.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMonitor the Routinator project release notes for an official patch addressing CVE-2026-72753.\u003c/li\u003e\n\u003cli\u003eInventory systems running Routinator and prepare for an upgrade cycle once the remediating version is released.\u003c/li\u003e\n\u003cli\u003eLimit exposure of the Routinator RRDP synchronization process to trusted RPKI repositories where possible to mitigate the risk of processing malicious or malformed notification files.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-26T19:45:32Z","date_published":"2026-10-26T19:45:24Z","id":"https://feed.craftedsignal.io/briefs/2026-10-routinator-rrdp-dos/","summary":"Routinator is vulnerable to a denial-of-service condition where specifically crafted or malformed RRDP notification files cause memory exhaustion during delta entry processing.","title":"NLnet Labs Routinator: RRDP delta processing denial-of-service (CVE-2026-72753)","url":"https://feed.craftedsignal.io/briefs/2026-10-routinator-rrdp-dos/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:nlnet_labs:routinator:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}