CVE-2026-49234

CVE-2026-49234

When sending a specifically crafted non-UTF-8 string as select-asn query parameter to the /api/v1/origins endpoint, Routinator crashes. This only affects users who allow API access from untrusted networks.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

Weakness classification (CWE)

References