{"metadata": {"vulnerability": "CVE-2026-72752", "count": 17, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-05-29T00:00:00Z", "date_only": false, "value": "2026-05-29T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / NLnet Labs", "record": "CVE-2026-72752", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-08-10T14:08:41.336Z", "date_only": false, "value": "2026-08-10T14:08:41.336Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-72752", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / NLnet Labs", "record": "CVE-2026-72752", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / NLnet Labs", "record": "CVE-2026-72752", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-10-26T16:59:37.867Z", "date_only": false, "value": "2026-10-26T16:59:37.867891Z", "kind": "sighting", "label": "Seen", "source": "https://social.nlnetlabs.nl/users/nlnetlabs/statuses/117508274366473188", "record": "CVE-2026-72752", "field": "creation_timestamp", "uuid": "3f92d93c-7513-422d-a2e3-a42069180d09", "content": "\ud83d\udea8 Security update: Routinator 0.15.3 is now available.\nThis release fixes several security issues. These security fixes primarily fix some cases where someone could make Routinator exit or become unavailable. They have been assigned CVE-2026-72752 till -72758.\nhttps://community.nlnetlabs.nl/t/routinator-0-15-3-until-it-ends-there-is-no-end-released/3496", "url": "https://social.nlnetlabs.nl/users/nlnetlabs/statuses/117508274366473188"}, {"timestamp": "2026-10-26T17:06:15.152Z", "date_only": false, "value": "2026-10-26T17:06:15.152Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-72752", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-26T17:06:15.152Z", "date_only": false, "value": "2026-10-26T17:06:15.152Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / NLnet Labs", "record": "CVE-2026-72752", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-26T17:25:36.875Z", "date_only": false, "value": "2026-10-26T17:25:36.875271Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117508376916441384", "record": "CVE-2026-72752", "field": "creation_timestamp", "uuid": "6460de15-f40f-4097-961a-5008fe2f6090", "content": "CVE-2026-72752 Routinator exits when requesting the output repeatedly Routinator runs out of memory when the JSON output is requested many times concurrently. This condition can be triggered maliciously by an attacker by opening a large number of connections to the HTTP server. Additionally Routinator runs into a stack overflow and exits when a payload item with too much metadata is discarded at once.\nThis only affects users that make their HTTP or RTR server available to untrusted networks.\nhttps://www.cve.org/CVERecord?id=CVE-2026-72752https://www.nlnetlabs.nl/downloads/routinator/CVE-2026-72752.txt#NLnetLabs #Routinator#CVE_2026_72752#bot", "url": "https://infosec.exchange/users/cve/statuses/117508376916441384"}, {"timestamp": "2026-10-26T17:47:18.784Z", "date_only": false, "value": "2026-10-26T17:47:18.784341Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-72752", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-26T17:47:18.784Z", "date_only": false, "value": "2026-10-26T17:47:18.784341Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-72752", "record": "FKIE_CVE-2026-72752", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-26T17:57:34.344Z", "date_only": false, "value": "2026-10-26T17:57:34.344Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-72752", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-26T17:57:34.344Z", "date_only": false, "value": "2026-10-26T17:57:34.344Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-72752", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-26T18:18:40Z", "date_only": false, "value": "2026-10-26T18:18:40Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9HHM-HXH6-HWXR", "record": "GHSA-9HHM-HXH6-HWXR", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-26T18:18:40.427Z", "date_only": false, "value": "2026-10-26T18:18:40.427", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-72752", "record": "FKIE_CVE-2026-72752", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-26T18:33:03Z", "date_only": false, "value": "2026-10-26T18:33:03Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9HHM-HXH6-HWXR", "record": "GHSA-9HHM-HXH6-HWXR", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-26T18:33:03Z", "date_only": false, "value": "2026-10-26T18:33:03Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9HHM-HXH6-HWXR", "record": "GHSA-9HHM-HXH6-HWXR", "field": "modified"}, {"timestamp": "2026-10-26T18:35:08.450Z", "date_only": false, "value": "2026-10-26T18:35:08.450", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-72752", "record": "FKIE_CVE-2026-72752", "field": "lastModified"}], "metrics": {"as_of": "2026-11-02T12:59:24.585Z", "anchors": {"origin": {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / NLnet Labs", "record": "CVE-2026-72752", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / NLnet Labs", "record": "CVE-2026-72752", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 651564.585362, "hours": 180.99016260055558, "days": 7.5412567750231485, "min_seconds": 565164.585362, "max_seconds": 651564.585362, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / NLnet Labs", "record": "CVE-2026-72752", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-02T12:59:24.585Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}
