NLnet Labs vulnerabilities

CVEs per yearBy the year they were published

1. 20181
2. 20201
3. 20214
4. 20224
5. 20234
6. 20243
7. 20253
8. 202676

Newest CVEs

• CVE-2026-109142

  Krill treats a "local parent" as already-authenticated, letting a CA operator act as any child of any CA on the same server

  NLnet Labs · Krill

  High8.4
• CVE-2026-109141

  Krill users restricted to one CA can make any other CA delegate its prefixes and publish ROAs for them via bulk import

  NLnet Labs · Krill

  High8.4
• CVE-2026-109140

  Krill login-session tokens reuse their encryption nonce across restarts, so any user who can log in can forge an "admin" token

  NLnet Labs · Krill

  High8.4
• CVE-2026-72758

  Routinator may exit on malformed ranges

  NLnet Labs · Routinator

  High7.5
• CVE-2026-72757

  Routinator HTTP server becomes unavailable with many unclosed connections

  NLnet Labs · Routinator

  Medium5.3
• CVE-2026-72756

  Routinator exits on malformed rsync URIs

  NLnet Labs · Routinator

  High7.5
• CVE-2026-72755

  Routinator stores TA certificate in cache without validation

  NLnet Labs · Routinator

  Low3.8
• CVE-2026-72754

  Routinator exits when parsing an incorrect or very large CRL file

  NLnet Labs · Routinator

  High7.5
• CVE-2026-72753

  Routinator incorrectly handles delta updates

  NLnet Labs · Routinator

  High8.2
• CVE-2026-72752

  Routinator exits when requesting the output repeatedly

  NLnet Labs · Routinator

  Medium6.5