CVE-2026-18461: falha crítica em RTI Connext Professional
Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core Libraries) allows Format String Injection.
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.2epss 0.3%
Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core Libraries) allows Format String Injection. This issue affects Connext Professional: from 7.5.0 before 7.7.0.1, from 7.3.0.10 before 7.3.1.6.
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
RTI · Connext ProfessionalCVEs relacionadas — RTI Connext Professional
No mesmo produto, das mais perigosas para as menos.
CVE-2021-38487HIGHPotential Network Amplification and Information Exposure in RTI Connext Professional and Connext MicroEPSS 3.4%CVE-2024-52058HIGHPotential arbitrary command execution in System Designer while parsing malicious HTTP/REST requestsEPSS 0.6%CVE-2024-52061HIGHPotential stack buffer overflow when parsing an XML typeEPSS 0.5%CVE-2026-18460MEDIUMOff-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.EPSS 0.4%CVE-2026-18459HIGHIncorrect Calculation vulnerability in RTI Connext Professional (Core Libraries) allows Abuse Existing Functionality.EPSS 0.4%CVE-2026-18457HIGHHeap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.EPSS 0.4%