CVE-2026-72755

LOW 3.8CVE-2026-72755 · Published 26/10/2026 · updated 26/10/2026

In short

CVE-2026-72755 is a LOW (CVSS 3.8) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 0.18%, higher than 8.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentially overwriting a known good TA certificate even if validation fails.

References

nlnetlabs.nl/downloads/routinator/CVE-2026-72755.txt

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free