CVE-2026-7300
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
A classic buffer overflow vulnerability has been found in RTI Connext Professional (Web Integration Service) due to copying data without checking input size. An attacker can exploit this flaw to cause filter failure, potentially leading to uncontrolled system behavior.
Risk Assessment
The risk for the organization includes potential remote code execution or disruption of the Web Integration Service, which could compromise data integrity and system availability.
Recommendation
It is recommended to immediately update RTI Connext Professional to version 7.3.1.3 or later (for the 7.0.x branch) and to version 6.1.* (for the 6.1.x branch). For the 7.4.0 branch, apply the patch before version 7.*.
Other vulnerabilities in RTI Connext Professional
See all- CVE-2026-3894Critical
An out-of-bounds read vulnerability in RTI Connext Professional Core Libraries allows buffer overread. This affects versions from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.3, from 6.1.0 before 6.1.*, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*, and from 5.0.0 before 5.2.*.
- CVE-2026-30799High
Missing authentication for a critical function in RTI Connext Professional (Security Plugins) allows identity spoofing. The vulnerability affects versions from 5.3.0 to 7.4.0 before 7.7.0.
- CVE-2026-2675Medium
Missing authentication for a critical function in RTI Connext Professional (Security Plugins) allows spoofing the source of data. The vulnerability affects versions from 5.3.0 up to 7.7.0 (excluding patched releases).
- CVE-2026-2674High
An out-of-bounds write vulnerability has been discovered in RTI Connext Professional, affecting Queueing Service, Core Libraries, and Persistence Service. This issue can lead to buffer overflows in versions from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.3, and from 6.1.0 before 6.1.*.
- CVE-2026-2467High
A heap-based buffer overflow vulnerability in RTI Connext Professional Core Libraries allows overflow of variables and tags. This issue affects multiple versions of the product.
Original NVD description (English source)
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Web Integration Service) allows Filter Failure through Buffer Overflow.This issue affects Connext Professional: from 7.4.0 before 7.*, from 7.0.0 before 7.3.1.3, from 6.1.2 before 6.1.*.