https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T14:32:04.378195+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-258154 EUVD-2026-258154 2026-10-08T14:32:04.451199+00:00 EUVD-2026-258154 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45235 fkie_cve-2024-45235 2026-10-08T14:32:04.451262+00:00

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync or RRDP) a resource certificate containing an Authority Key Identifier extension that lacks the keyIdentifier field. Fort references this pointer without sanitizing it first. Because Fort is an RPKI Relying Party, a crash can lead to Route Origin Validation unavailability, which can lead to compromised routing.

 https://cve.radiocsirt.org/vuln/ghsa-2wr3-xjqg-6q48 GHSA-2wr3-xjqg-6q48 2026-10-08T14:32:04.451299+00:00

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync or RRDP) a resource certificate containing an Authority Key Identifier extension that lacks the keyIdentifier field. Fort references this pointer without sanitizing it first. Because Fort is an RPKI Relying Party, a crash can lead to Route Origin Validation unavailability, which can lead to compromised routing.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-45235 UBUNTU-CVE-2024-45235 2026-10-08T14:32:04.451318+00:00

Affected: Ubuntu:Pro:20.04:LTS: fort-validator, Ubuntu:22.04:LTS: fort-validator, Ubuntu:Pro:24.04:LTS: fort-validator

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync or RRDP) a resource certificate containing an Authority Key Identifier extension that lacks the keyIdentifier field. Fort references this pointer without sanitizing it first. Because Fort is an RPKI Relying Party, a crash can lead to Route Origin Validation unavailability, which can lead to compromised routing.