Is CVE-2026-72755 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-72755?

CVE-2026-72755 has a CVSS v3 severity of LOW (3.8).

Back

CVE-2026-72755

Description

Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentially overwriting a known good TA certificate even if validation fails.