{"id":"CVE-2026-72758","aliases":["EUVD-2026-110031","GHSA-h2jm-59v6-cf3h"],"status":"published","title":"Routinator may exit on malformed ranges","description":"When parsing an AS range in Routinator, if the maximum value of the range is smaller than the minimum value of the range, Routinator will never reach the maximum value and run out of memory.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00397,"percentile":0.34293,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-755"],"published":"2026-10-26T17:07:14Z","modified":"2026-10-26T18:35:08Z","products":[{"vendor":"nlnet labs","product":"routinator"}],"references":[{"url":"https://www.nlnetlabs.nl/downloads/routinator/CVE-2026-72756.txt","tags":["vendor-advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72758"},{"url":"https://github.com/advisories/GHSA-h2jm-59v6-cf3h"}],"sources":{"cve":[{"id":"CVE-2026-72758","title":"Routinator may exit on malformed ranges","description":"When parsing an AS range in Routinator, if the maximum value of the range is smaller than the minimum value of the range, Routinator will never reach the maximum value and run out of memory.","status":"published","published":"2026-10-26T17:07:14.74Z","modified":"2026-10-26T17:57:33.25Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-755"],"updated_at":"2026-11-02T14:19:52.016971Z"}],"euvd":[{"id":"EUVD-2026-110031","description":"When parsing an AS range in Routinator, if the maximum value of the range is smaller than the minimum value of the range, Routinator will never reach the maximum value and run out of memory.","status":"published","published":"2026-10-26T17:07:14Z","modified":"2026-10-26T17:57:33Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:59:28.784227Z"}],"ghsa":[{"id":"GHSA-h2jm-59v6-cf3h","title":"When parsing an AS range in Routinator, if the maximum value of the range is smaller than the...","description":"When parsing an AS range in Routinator, if the maximum value of the range is smaller than the minimum value of the range, Routinator will never reach the maximum value and run out of memory.","status":"published","published":"2026-10-26T18:33:03Z","modified":"2026-10-26T18:33:10Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-755"],"updated_at":"2026-11-02T15:14:25.232123Z"}],"nvd":[{"id":"CVE-2026-72758","description":"When parsing an AS range in Routinator, if the maximum value of the range is smaller than the minimum value of the range, Routinator will never reach the maximum value and run out of memory.","status":"published","published":"2026-10-26T18:18:42.85Z","modified":"2026-10-26T18:35:08.45Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-755"],"updated_at":"2026-11-02T14:13:03.452847Z"}]}}