VulnSea

RTI has 31 CVEs on record between 2024 and 2026. Cadence is steady at roughly 11 per quarter. The busiest recent month was September 2026 with 11. The median CVSS is 7.8 (high), with 8 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-125 (8) and CWE-122 (4). Most affected products: connext_professional (29), connext_micro (2).

CVEs per month

Last 12 months, by publish date

111201020304050607080910
Exploited share
0% vs 1% corpus
Median CVSS
7.8
Publish → KEV
—
Last 90 days
11 prev 8

Products

  • connext_professional 29
  • connext_micro 2
Follow RTI:RSS feedSave a search →Embed badge ↗
31
Total CVEs
8
Critical
0
CISA KEV
0
Exploited

Worst active — by depth score

RTI vulnerabilities

CVEs affecting RTI, newest first. Open any entry for full detail, references, and exploit status.

31 CVEsRSS

CVE-2026-7866Critical· 10.0
1mo ago

Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers

Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6, from 6.1.0 before 6.1.*, from …

▾ MidnightRTI · connext_professionalEPSS 0.31%via NVD
CVE-2026-18461Critical· 9.2
1mo ago

Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core Libraries) allows Format String Injection

Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core Libraries) allows Format String Injection. This issue affects Connext Professional: from 7.5.0 before 7.7.0.1, from 7.3.0.10 before 7.3.1.6.

▾ MidnightRTI · connext_professionalEPSS 0.33%via NVD
CVE-2026-8849High· 7.7
1mo ago

Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation

Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation. This issue affects Connext Professional: from 7.6.0 before 7.7.0.1.

▾ TwilightRTI · connext_professionalEPSS 0.38%via NVD
CVE-2026-11388Medium· 6.9
1mo ago

Double Free vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation

Double Free vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.1.0 before 7.3.1.6.

▾ SunlitRTI · connext_professionalEPSS 0.15%via NVD
CVE-2026-11389Medium· 6.8
1mo ago

Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers

Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This issue affects Co…

▾ SunlitRTI · connext_professionalEPSS 0.15%via NVD
CVE-2026-18458Medium· 6.8
1mo ago

Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers

Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This issue affects Co…

▾ SunlitRTI · connext_professionalEPSS 0.15%via NVD
CVE-2026-18457High· 8.3
1mo ago

Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers

Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6, from 6.1.0 before 6.1.*, from 6…

▾ TwilightRTI · connext_professionalEPSS 0.43%via NVD
CVE-2026-18460Medium· 6.9
1mo ago

Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers

Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6.

▾ SunlitRTI · connext_professionalEPSS 0.43%via NVD
CVE-2026-18459High· 8.7
1mo ago

Incorrect Calculation vulnerability in RTI Connext Professional (Core Libraries) allows Abuse Existing Functionality

Incorrect Calculation vulnerability in RTI Connext Professional (Core Libraries) allows Abuse Existing Functionality. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6, from 6.1.0 before 6.1.*,…

▾ TwilightRTI · connext_professionalEPSS 0.43%via NVD
CVE-2026-18462High· 7.3
1mo ago

Integer Overflow or Wraparound, Improper Access Control vulnerability in RTI Connext Professional (Core Libraries) allows Shared Resource Manipulation

Integer Overflow or Wraparound, Improper Access Control vulnerability in RTI Connext Professional (Core Libraries) allows Shared Resource Manipulation. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before…

▾ TwilightRTI · connext_professionalEPSS 0.11%via NVD
CVE-2026-18626Medium· 6.8
1mo ago

Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers

Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6, from 6.1.0 before 6.1.*, from 6.0.0 bef…

▾ SunlitRTI · connext_professionalEPSS 0.15%via NVD
CVE-2026-2467High· 8.1
4mo ago

Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags

Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.3, from 6.1.0 before 6.1.…

▾ Twilightrti · connext_professionalEPSS 0.19%via NVD
CVE-2026-2674High· 8.1⚖ disputed
4mo ago

Out-of-bounds Write vulnerability in RTI Connext Professional (Queueing Service,Core Libraries,Persistence Service) allows Overflow Buffers

Out-of-bounds Write vulnerability in RTI Connext Professional (Queueing Service,Core Libraries,Persistence Service) allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.3, fro…

▾ Twilightrti · connext_professionalEPSS 0.18%via NVD
CVE-2026-3894Critical· 9.1
4mo ago

Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers

Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.3, from 6.1.0 before 6.1.*, from 6.0.0 befor…

▾ Midnightrti · connext_professionalEPSS 0.20%via NVD
CVE-2026-2675Medium· 6.5
4mo ago

Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Fake the Source of Data

Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Fake the Source of Data. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.3, from 6…

▾ Sunlitrti · connext_professionalEPSS 0.21%via NVD
CVE-2026-7300Medium· 6.5⚖ disputed
4mo ago

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Web Integration Service) allows Filter Failure through Buffer Overflow

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Web Integration Service) allows Filter Failure through Buffer Overflow. This issue affects Connext Professional: from 7.4.0…

▾ Sunlitrti · connext_professionalEPSS 0.25%via NVD
CVE-2026-30802High· 8.2
4mo ago

Out-of-bounds Read vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers

Out-of-bounds Read vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers. This issue affects Connext Micro: from 4.0.0 before 4.3.0, from 2.4.5 before 2.4.*.

▾ Twilightrti · connext_microEPSS 0.25%via NVD
CVE-2026-30799High· 8.1⚖ disputed
4mo ago

Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Identity Spoofing

Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Identity Spoofing. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.6, from 6.1.0 b…

▾ Twilightrti · connext_professionalEPSS 0.26%via NVD
CVE-2026-30803Critical· 9.1
4mo ago

Integer Underflow (Wrap or Wraparound) vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers

Integer Underflow (Wrap or Wraparound) vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers. This issue affects Connext Micro: from 4.0.0 before 4.3.0.

▾ Midnightrti · connext_microEPSS 0.30%via NVD
CVE-2025-14543Critical· 9.1
6mo ago

Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Core Libraries) allows Serialized Data External Linking

Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Core Libraries) allows Serialized Data External Linking. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before…

▾ Midnightrti · connext_professionalEPSS 0.21%via NVD
CVE-2026-4374Critical· 9.1
7mo ago

Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Recording Service,Routing Service,Queueing Service,Cloud Discovery Service,Observability Collector) allows Serialized Data External Linking,…

Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Recording Service,Routing Service,Queueing Service,Cloud Discovery Service,Observability Collector) allows Serialized Data External Linking,…

▾ Midnightrti · connext_professionalEPSS 0.24%via NVD
CVE-2026-2394Medium· 6.5
7mo ago

Buffer Over-read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers

Buffer Over-read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.1, from 6.1.0 before 6.1.2.34, from 6.0.0 befo…

▾ Sunlitrti · connext_professionalEPSS 0.16%via NVD
CVE-2025-10450High· 7.5
10mo ago

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in RTI Connext Professional (Core Libraries) allows Sniffing Network Traffic

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in RTI Connext Professional (Core Libraries) allows Sniffing Network Traffic. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.2.0 be…

▾ Twilightrti · connext_professionalEPSS 0.23%via NVD
CVE-2025-4582High· 7.1⚖ disputed
1y ago

Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation, Overread Buffers

Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation, Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.6.0, from 7.0.0 before 7.3.0.8, from 6…

▾ Twilightrti · connext_professionalEPSS 0.14%via NVD
CVE-2025-4993Critical· 9.1
1y ago

Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation

Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation. This issue affects Connext Professional: from 7.4.0 before 7.6.0, from 7.0.0 before 7.3.0.10, from 6.1.0 before 6.1.2.2…

▾ Midnightrti · connext_professionalEPSS 0.37%via NVD
CVE-2025-1255Critical· 9.1
1y ago

Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation

Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation. This issue affects Connext Professional: from 7.4.0 before 7.6.0, from 7.2.0 before 7.3.0.9.

▾ Midnightrti · connext_professionalEPSS 0.37%via NVD
CVE-2025-8410High· 7.4
1y ago

Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation

Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation. This issue affects Connext Professional: from 7.5.0 before 7.6.0.

▾ Twilightrti · connext_professionalEPSS 0.22%via NVD
CVE-2025-1252High· 7.1
1y ago

Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags

Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags. This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7, from 6.1.0 before 6.1.…

▾ Twilightrti · connext_professionalEPSS 0.16%via NVD
CVE-2025-1253High· 7.8
1y ago

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags. This issue affects Connext Professional: f…

▾ Twilightrti · connext_professionalEPSS 0.18%via NVD
CVE-2025-1254High· 7.4
1y ago

Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Recording Service) allows Overflow Buffers, Overread Buffers

Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Recording Service) allows Overflow Buffers, Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7,…

▾ Twilightrti · connext_professionalEPSS 0.25%via NVD
RTI vulnerabilities (CVEs) · VulnSea