Routinator
14 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Routinator, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.
Routinator CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 1 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 4 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 14 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical1
- High12
Latest CVEs
The 14 most recently published vulnerabilities affecting Routinator.
- CVE-2026-49235Routinator crashes on specifically crafted RRDP XML files7.5
- CVE-2026-49234Routinator crashes on specifically crafted ASN strings in the API7.5
- CVE-2026-49233Routinator cache path traversal using rogue rsync URIs7.5
- CVE-2026-49232Routinator exits when accepting an incoming HTTP or RTR connection fails—
- CVE-2025-0638Routinator crashes when illegal characters are present in manifest file names7.5
- CVE-2024-1622Routinator terminates when RTR connection is reset too quickly after opening7.5
- CVE-2023-39916Possible path traversal when storing RRDP responses9.3
- CVE-2023-39915Crashes on parsing certain invalid RPKI objects7.5
- CVE-2022-3029Fatal error on incorrect base64 data in RRDP7.5
- CVE-2021-43174gzip transfer encoding caused out-of-memory crash7.5
- CVE-2021-43173Hanging RRDP request7.5
- CVE-2021-43172Infinite length chain of RRDP repositories7.5
- CVE-2021-41531Invalid RPKI data could disable Route Origin Validation on RTR clients.7.5
- CVE-2020-17366An issue was discovered in NLnet Labs Routinator 0.1.0 through 0.7.1. It allows remote attackers to bypass intended access restrictions or to cause a denial of service on dependent routing systems ...7.4
Product grouping is registry-driven, with AI assist and human review. How it works