CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,496 CVEs published, 359 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,496
Show in the list
Critical, last 7 days
359
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product rti:connext_professional. Show all products

25 CVEs, showing 1 to 25
CVESeverityTitlePublished
CVE-2025-1255Critical 9.1Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.Sep 23, 2025
CVE-2025-4582High 7.1Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation, Overread Buffers.Sep 23, 2025
CVE-2025-4993Critical 9.1Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.Sep 23, 2025
CVE-2025-8410High 7.4Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation.Sep 23, 2025
CVE-2025-10450High 7.5Exposure of Private Personal Information to an Unauthorized Actor vulnerability in RTI Connext Professional (Core Libraries) allows Sniffing Network Traffic.Dec 16, 2025
CVE-2026-2394Medium 6.5Buffer Over-read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.Apr 1, 2026
CVE-2026-4374Critical 9.1Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Recording Service,Routing Service,Queueing Service,Cloud Discovery Service,Observability Collector) al…Apr 1, 2026
CVE-2025-14543Critical 9.1Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Core Libraries) allows Serialized Data External Linking.Apr 30, 2026
CVE-2026-2467High 8.1Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.Jun 17, 2026
CVE-2026-2674High 8.1Out-of-bounds Write vulnerability in RTI Connext Professional (Queueing Service,Core Libraries,Persistence Service) allows Overflow Buffers.Jun 17, 2026
CVE-2026-2675Medium 6.5Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Fake the Source of Data.Jun 17, 2026
CVE-2026-30799High 8.1Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Identity Spoofing.Jun 17, 2026
CVE-2026-3894Critical 9.1Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.Jun 17, 2026
CVE-2026-7300Medium 6.5Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Web Integration Service) allows Filter Failure through Buffer Overflow.Jun 17, 2026
CVE-2026-7866Critical 10.0Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.
Assigned by RTI
Sep 22, 2026
CVE-2026-8849High 7.7Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation.
Assigned by RTI
Sep 22, 2026
CVE-2026-11388Medium 6.9Double Free vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation.
Assigned by RTI
Sep 22, 2026
CVE-2026-11389Medium 6.8Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.
Assigned by RTI
Sep 22, 2026
CVE-2026-18457High 8.3Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.
Assigned by RTI
Sep 22, 2026
CVE-2026-18458Medium 6.8Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.
Assigned by RTI
Sep 22, 2026
CVE-2026-18459High 8.7Incorrect Calculation vulnerability in RTI Connext Professional (Core Libraries) allows Abuse Existing Functionality.
Assigned by RTI
Sep 22, 2026
CVE-2026-18460Medium 6.9Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.
Assigned by RTI
Sep 22, 2026
CVE-2026-18461Critical 9.2Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core Libraries) allows Format String Injection.
Assigned by RTI
Sep 22, 2026
CVE-2026-18462High 7.3Integer Overflow or Wraparound, Improper Access Control vulnerability in RTI Connext Professional (Core Libraries) allows Shared Resource Manipulation.
Assigned by RTI
Sep 22, 2026
CVE-2026-18626Medium 6.8Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.
Assigned by RTI
Sep 22, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.