CVE-2026-49232CWE-755

Routinator exits when accepting an incoming HTTP or RTR connection fails

High · published June 8, 2026

CVSS v4.0
8.7
EPSS
0%
Percentile
36.0
In the wild
Unconfirmed
What it is

Routinator exits on any error when accepting incoming HTTP or RTR connections, including ones it can recover from such as running out of file descriptors. This condition can be triggered maliciously by an attacker by opening a large number of connections to the HTTP or RTR server.

This only affects users that make their HTTP or RTR server available to untrusted networks.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
EPSS
0.00428 · 36.0th percentile
Weakness
CWE-755 · Improper Handling of Exceptional Conditions
Published
2026-06-08T12:58Z
EPSS history
Timeline
  • 08 JUN 12:58Z
    Routinator exits when accepting an incoming HTTP or RTR connection fails
    cvelistv5