CVE-2026-2675
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
Missing authentication for a critical function in RTI Connext Professional (Security Plugins) allows spoofing the source of data. The vulnerability affects versions from 5.3.0 up to 7.7.0 (excluding patched releases).
Risk Assessment
An attacker can impersonate a trusted data source, compromising the integrity and authenticity of information in real-time systems.
Recommendation
Immediately update RTI Connext Professional to version 7.7.0, 7.3.1.3, or later, following available security patches.
Other vulnerabilities in RTI Connext Professional
See all- CVE-2026-3894Critical
An out-of-bounds read vulnerability in RTI Connext Professional Core Libraries allows buffer overread. This affects versions from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.3, from 6.1.0 before 6.1.*, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*, and from 5.0.0 before 5.2.*.
- CVE-2026-7300Medium
A classic buffer overflow vulnerability has been found in RTI Connext Professional (Web Integration Service) due to copying data without checking input size. An attacker can exploit this flaw to cause filter failure, potentially leading to uncontrolled system behavior.
- CVE-2026-30799High
Missing authentication for a critical function in RTI Connext Professional (Security Plugins) allows identity spoofing. The vulnerability affects versions from 5.3.0 to 7.4.0 before 7.7.0.
- CVE-2026-2674High
An out-of-bounds write vulnerability has been discovered in RTI Connext Professional, affecting Queueing Service, Core Libraries, and Persistence Service. This issue can lead to buffer overflows in versions from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.3, and from 6.1.0 before 6.1.*.
- CVE-2026-2467High
A heap-based buffer overflow vulnerability in RTI Connext Professional Core Libraries allows overflow of variables and tags. This issue affects multiple versions of the product.
Original NVD description (English source)
Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Fake the Source of Data.This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.3, from 6.1.0 before 6.1.*, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*.