CVE-2026-72755

Routinator stores TA certificate in cache without validation

low · 3.8

Published Oct 26, 2026, 17:06 UTC

Description

Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentially overwriting a known good TA certificate even if validation fails.

Official CVE record View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.