Routinator
- Software type
- Other
- Total vulnerabilities (90 days)
- 0
Unreliable vulnerability data
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/23/2026, Routinator recorded 0 security vulnerabilities in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Routinator and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-49235Routinator crashes on specifically crafted RRDP XML filesCVE-2026-49234Routinator crashes on specifically crafted ASN strings in the APICVE-2026-49233Routinator cache path traversal using rogue rsync URIsCVE-2026-49232Routinator exits when accepting an incoming HTTP or RTR connection failsCVE-2025-0638Routinator crashes when illegal characters are present in manifest file names| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-49235Routinator crashes on specifically crafted RRDP XML files | Exploitation statusNot exploited | FixYes | Published06/08/2026 | SeverityHigh |
CVE-2026-49234Routinator crashes on specifically crafted ASN strings in the API | Exploitation statusNot exploited | FixYes | Published06/08/2026 | SeverityHigh |
CVE-2026-49233Routinator cache path traversal using rogue rsync URIs | Exploitation statusNot exploited | FixYes | Published06/08/2026 | SeverityHigh |
CVE-2026-49232Routinator exits when accepting an incoming HTTP or RTR connection fails | Exploitation statusNot exploited | FixYes | Published06/08/2026 | SeverityHigh |
CVE-2025-0638Routinator crashes when illegal characters are present in manifest file names | Exploitation statusNot exploited | FixYes | Published01/22/2025 | SeverityHigh |
CVE-2024-1622Routinator terminates when RTR connection is reset too quickly after opening | Exploitation statusNot exploited | FixYes | Published02/26/2024 | SeverityHigh |
CVE-2023-39916Possible path traversal when storing RRDP responses | Exploitation statusNot exploited | FixYes | Published09/13/2023 | SeverityCritical |
CVE-2023-39915Crashes on parsing certain invalid RPKI objects | Exploitation statusNot exploited | FixYes | Published09/13/2023 | SeverityHigh |
CVE-2022-3029Fatal error on incorrect base64 data in RRDP | Exploitation statusNot confirmed | FixNo | Published09/13/2022 | SeverityUnknown |
CVE-2021-43174gzip transfer encoding caused out-of-memory crash | Exploitation statusNot confirmed | FixNo | Published11/09/2021 | SeverityUnknown |
13 Results | Page 1 of 2