CVE-2026-49235: Routinator crashes on specifically crafted RRDP XML files
Published Jun 8, 2026
·Updated
When Routinator encounters a file via RRDP using a specifically crafted Document Type Definition, Routinator crashes.
Affected Software
2 affected components
Nlnet Labs Routinator
nlnetlabs Routinator<0.15.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Routinatorto a version that resolves this vulnerability.Fixed in 0.15.2
Event History
Jun 8, 2026
CVE Published
via MITRE·12:59 PM
Data Sourced
via MITRE·12:59 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·03:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-49235?
CVE-2026-49235 has a severity rating of high, with a CVSS score of 8.7.
2
How do I fix CVE-2026-49235?
To fix CVE-2026-49235, upgrade to Routinator version 0.15.2 or later.
3
What software is affected by CVE-2026-49235?
CVE-2026-49235 affects NLnet Labs Routinator.
4
What is the impact of CVE-2026-49235?
CVE-2026-49235 can cause Routinator to crash when processing specially crafted RRDP XML files.
5
When was CVE-2026-49235 published?
CVE-2026-49235 was published on June 8, 2026.