Priority MEDIUM 50
RTI Connext Professional versions 4.1 to 6.1.0, and Connext Micro versions 2.4 and later are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.03383 · Published 2022-05-05 · Fixed in 6.1.0 CWE-406
Priority MEDIUM 49
Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.
CVSS 4.0CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.00311 · Published 2026-09-22 · Fixed in 7.7.0.1, 7.3.1.6 CWE-121
Priority MEDIUM 46
Integer Underflow (Wrap or Wraparound) vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00296 · Published 2026-06-17 · Fixed in 4.3.0 CWE-191
Priority MEDIUM 45
Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.002 · Published 2026-06-17 · Fixed in 7.7.0, 7.3.1.3 CWE-125
Priority MEDIUM 45
Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00189 · Published 2026-06-17 · Fixed in 7.7.0, 7.3.1.3 CWE-122
Priority MEDIUM 45
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RTI Connext Professional (Queuing Service) allows SQL Injection.This issue affects Connext Professional: from 7.0.0 be…
CVSS 4.0CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00408 · Published 2024-12-13 · Fixed in 7.3.0, 6.1.2.17 CWE-89
Priority MEDIUM 45
RTI Connext DDS Professional and Connext DDS Secure Versions 4.2x to 6.1.0 not correctly calculate the size when allocating the buffer, which may result in a buffer overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01445 · Published 2022-05-05 · No fix listed CWE-131
Priority MEDIUM 44
Out-of-bounds Read vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00249 · Published 2026-06-17 · Fixed in 4.3.0 CWE-125
Priority MEDIUM 44
Incorrect Calculation vulnerability in RTI Connext Professional (Core Libraries) allows Abuse Existing Functionality.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00428 · Published 2026-09-22 · Fixed in 7.7.0.1, 7.3.1.6 CWE-682
Priority MEDIUM 44
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Web Integration Service) allows Filter Failure through Buffer Overflow.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00251 · Published 2026-06-17 · Fixed in 7.7.0.1, 7.3.1.3 CWE-120
Priority MEDIUM 42
Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core Libraries) allows Format String Injection.
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00331 · Published 2026-09-22 · Fixed in 7.7.0.1, 7.3.1.6 CWE-134
Priority MEDIUM 42
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Routing Service) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 be…
CVSS 4.0HIGH 8.3· Network · No auth · No interaction · EPSS 0.00288 · Published 2024-12-13 · Fixed in 7.5.0, 7.3.0.5 +2 CWE-120
Priority MEDIUM 42
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries, Routing Service) allows Overflow Variables and Tags.This issue affects Connext Professiona…
CVSS 4.0HIGH 8.3· Network · No auth · No interaction · EPSS 0.00339 · Published 2024-12-13 · Fixed in 7.3.0.5, 6.1.2.21 +2 CWE-120
Priority MEDIUM 42
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries, Queuing Service, Recording Service, Routing Service) allows Overflow Variables and Tags.Th…
CVSS 4.0HIGH 8.3· Network · No auth · No interaction · EPSS 0.00462 · Published 2024-12-13 · Fixed in 7.5.0, 7.3.0.5 +3 CWE-120
Priority MEDIUM 42
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Routing Service, Recording Service, Queuing Service, Observability Collector Service, Cloud Discovery Serv…
CVSS 4.0HIGH 8.3· Network · No auth · No interaction · EPSS 0.00314 · Published 2024-12-13 · Fixed in 7.3.0.5, 6.1.2.21 +2 CWE-120
Priority MEDIUM 41
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in RTI Connext Professional (Core Libraries) allows Sniffing Network Traffic.
CVSS 4.0HIGH 8.3· Network · No auth · No interaction · EPSS 0.00229 · Published 2025-12-16 · Fixed in 7.7.0, 7.3.1 CWE-359
Priority LOW 38
Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Recording Service,Routing Service,Queueing Service,Cloud Discovery Service,Observability Collector) allows Serialized Data…
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00239 · Published 2026-04-01 · Fixed in 7.7.0, 7.3.1.1 +1 CWE-611
Priority LOW 38
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in RTI Connext Professional (System Designer) allows OS Command Injection.This issue affects Connext Professional:…
CVSS 4.0HIGH 8.6· Local · No auth · No interaction · EPSS 0.00634 · Published 2024-12-13 · Fixed in 7.3.0.2, 6.1.2.19 CWE-78
Priority LOW 37
Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00428 · Published 2026-09-22 · Fixed in 7.7.0.1, 7.3.1.6 CWE-193
Priority LOW 37
Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Core Libraries) allows Serialized Data External Linking.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00205 · Published 2026-04-30 · Fixed in 7.7.0, 7.3.1.1 CWE-611
Priority LOW 36
Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.
CVSS 4.0HIGH 8.3· Network · No auth · No interaction · EPSS 0.00426 · Published 2026-09-22 · Fixed in 7.7.0.1, 7.3.1.6 CWE-122
Priority LOW 36
Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation.
CVSS 4.0HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00382 · Published 2026-09-22 · Fixed in 7.7.0.1 CWE-416
Priority LOW 36
Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.
CVSS 4.0HIGH 8.3· Network · No auth · No interaction · EPSS 0.0037 · Published 2025-09-23 · Fixed in 7.6.0, 7.3.0.10 +2 CWE-822
Priority LOW 36
Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.
CVSS 4.0HIGH 8.3· Network · No auth · No interaction · EPSS 0.00369 · Published 2025-09-23 · Fixed in 7.6.0, 7.3.0.9 CWE-822
Priority LOW 35
Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Recording Service) allows Overflow Buffers, Overread Buffers.
CVSS 4.0HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00253 · Published 2025-05-08 · Fixed in 7.5.0, 7.3.0.7 +2 CWE-125
Load more