CVE-2026-18460: falha de média gravidade em RTI Connext Professional
Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.4%
Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
Produtos afetados
RTI · Connext ProfessionalCVEs relacionadas — RTI Connext Professional
No mesmo produto, das mais perigosas para as menos.
CVE-2021-38487HIGHPotential Network Amplification and Information Exposure in RTI Connext Professional and Connext MicroEPSS 3.4%CVE-2024-52058HIGHPotential arbitrary command execution in System Designer while parsing malicious HTTP/REST requestsEPSS 0.6%CVE-2024-52061HIGHPotential stack buffer overflow when parsing an XML typeEPSS 0.5%CVE-2026-18459HIGHIncorrect Calculation vulnerability in RTI Connext Professional (Core Libraries) allows Abuse Existing Functionality.EPSS 0.4%CVE-2026-18457HIGHHeap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.EPSS 0.4%CVE-2024-52057CRITICALPotential arbitrary SQL query execution in Queuing Service while parsing malicious remote commands or configuration filesEPSS 0.4%