CVE-2026-72757 — MEDIUM (5.3)

Vulnerability Description

Routinator runs out of open connections on the HTTP server when many connections are opened but never closed, leaving the HTTP server unavailable. This condition can be triggered maliciously by an attacker by opening a large number of connections to the HTTP server. This only affects users that make their HTTP or RTR server available to untrusted networks.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

LOW

Related Weaknesses (CWE)

CWE-755

References

https://www.nlnetlabs.nl/downloads/routinator/CVE-2026-72756.txt

FAQ

What is CVE-2026-72757?

CVE-2026-72757 is a vulnerability with a CVSS score of 5.3 (MEDIUM). Routinator runs out of open connections on the HTTP server when many connections are opened but never closed, leaving the HTTP server unavailable. This condition can be triggered maliciously by an att...

How severe is CVE-2026-72757?

CVE-2026-72757 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-72757?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.