CVE-2026-109141 - Krill users restricted to one CA can make any other CA delegate its prefixes and publish ROAs for them via bulk import
CVE ID :CVE-2026-109141 Published : Nov. 2, 2026, 4:17 p.m. | 46 minutes ago Description :The vulnerability gives a role that is restricted to a list of CAs (cas = [...]) its full permission set for every request that is not tied to a CA, including the bulk import endpoint POST...