Nicmx vulnerabilities
We track 4 vulnerabilities in Nicmx products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 21, 2026.
Latest Nicmx vulnerabilities
- 7.2 High severity
FORT-validator: Origin Validation Error
FORT Validator is a Resource Public Key Infrastructure (RPKI) relying-party validator that produces validated route-origin data. FORT Validator versions through 1.6.7 contain an origin-validation error in their RRDP processing: a delegated CA under the same Tr
- 7.5 High severity
fort-validator: Integer Underflow (Wrap or Wraparound)
An integer underflow was discovered in Fort 1.6.3 and 1.6.4 before 1.6.5. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync or RRDP) a Manifest RPKI object containing an empty fileList. Fort dereferences (and, shortly
- 7.5 High severity
Fort-validator: NULL Pointer Dereference
An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync or RRDP) an ROA or a Manifest containing a null eContent field. Fort dereferences the pointer without sanitizing it first
- 7.5 High severity
Fort-validator: Improper Certificate Validation
An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync or RRDP) an ROA or a Manifest containing a signedAttrs encoded in non-canonical form. This bypasses Fort's BER decoder, r