CVE-2026-49234EPSS p17.0%

CVE-2026-49234CVE-2026-49234

nlnetlabs / routinator

Description

When sending a specifically crafted non-UTF-8 string as select-asn query parameter to the /api/v1/origins endpoint, Routinator crashes. This only affects users who allow API access from untrusted networks.

Scoring

CVSS 7.5 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS0.26% probability of exploitation · percentile 17.0% · 2026-06-18T12:00:27Z
Last modified2026-06-12

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-49232
CVE
CVE-2026-49235
CVE
CVE-2026-50206
CVE
CVE-2026-33602
CVE
CVE-2025-64126
CVE
CVE-2026-37462
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.