HTTP Server Vulnerability in Routinator by NLnet Labs

CVE-2026-72757

What is CVE-2026-72757?

Routinator is susceptible to a connection exhaustion vulnerability that can render its HTTP server unavailable. This issue arises when an attacker opens numerous connections without closing them, thus overwhelming the server's capacity. The vulnerability primarily affects users who expose their HTTP or RTR server to untrusted networks, as they may unknowingly become targets of malicious activities aimed at disrupting service availability.

References