Description
Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentially overwriting a known good TA certificate even if validation fails.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NLnet Labs | Routinator | — | — |
References
- https://www.nlnetlabs.nl/downloads/routinator/CVE-2026-72755.txt vendor-advisory