Read the docs

RTI

Records45All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high22CVSS 7.0–8.9

Exploited now

RTI records in CISA KEV

No RTI vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

32 records in Connext Professional · all components

Priority MEDIUM 45

Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.002 Published 2026-06-17 Fixed in 7.7.0, 7.3.1.3 CWE-125
Priority MEDIUM 45

Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00189 Published 2026-06-17 Fixed in 7.7.0, 7.3.1.3 CWE-122
TI-2024-34933 CVE-2024-52057 · GHSA-fqh4-5w83-h9mv

SQL injection in RTI Connext Professional

Priority MEDIUM 45

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RTI Connext Professional (Queuing Service) allows SQL Injection.This issue affects Connext Professional: from 7.0.0 be…

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00408 Published 2024-12-13 Fixed in 7.3.0, 6.1.2.17 CWE-89
Priority MEDIUM 44

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Web Integration Service) allows Filter Failure through Buffer Overflow.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00251 Published 2026-06-17 Fixed in 7.7.0.1, 7.3.1.3 CWE-120
Priority MEDIUM 42

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Routing Service) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 be…

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00288 Published 2024-12-13 Fixed in 7.5.0, 7.3.0.5 +2 CWE-120
Priority MEDIUM 42

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries, Routing Service) allows Overflow Variables and Tags.This issue affects Connext Professiona…

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00339 Published 2024-12-13 Fixed in 7.3.0.5, 6.1.2.21 +2 CWE-120
Priority MEDIUM 42

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries, Queuing Service, Recording Service, Routing Service) allows Overflow Variables and Tags.Th…

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00462 Published 2024-12-13 Fixed in 7.5.0, 7.3.0.5 +3 CWE-120
Priority MEDIUM 42

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Routing Service, Recording Service, Queuing Service, Observability Collector Service, Cloud Discovery Serv…

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00314 Published 2024-12-13 Fixed in 7.3.0.5, 6.1.2.21 +2 CWE-120
Priority LOW 38

Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Recording Service,Routing Service,Queueing Service,Cloud Discovery Service,Observability Collector) allows Serialized Data…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00239 Published 2026-04-01 Fixed in 7.7.0, 7.3.1.1 +1 CWE-611
Priority LOW 38

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in RTI Connext Professional (System Designer) allows OS Command Injection.This issue affects Connext Professional:…

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.00634 Published 2024-12-13 Fixed in 7.3.0.2, 6.1.2.19 CWE-78
Priority LOW 37

Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Core Libraries) allows Serialized Data External Linking.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00205 Published 2026-04-30 Fixed in 7.7.0, 7.3.1.1 CWE-611
Priority LOW 35

Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Recording Service) allows Overflow Buffers, Overread Buffers.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00253 Published 2025-05-08 Fixed in 7.5.0, 7.3.0.7 +2 CWE-125
Priority LOW 33

In RTI Connext Professional 5.3.1 through 6.1.0 before 6.1.1, a buffer overflow in XML parsing from Routing Service, Recording Service, Queuing Service, and Cloud Discovery Service allows attackers to execute code with t…

CVSS 3.1HIGH 7.3 Local Low privileges No interaction EPSS 0.00183 Published 2024-05-21 No fix listed CWE-120
TI-2024-34935 CVE-2024-52059 · GHSA-2j25-pjp3-6786

Buffer overflow in RTI Connext Professional

Priority LOW 32

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Heap-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in RTI Connext Professional (Security Plugins) allows Overflow Variables an…

CVSS 4.0MEDIUM 6.9 Local Low privileges No interaction EPSS 0.00168 Published 2024-12-13 Fixed in 7.3.0.2, 6.1.2.17 CWE-120
Priority LOW 30

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.

CVSS 4.0MEDIUM 6.9 Local Low privileges No interaction EPSS 0.00176 Published 2025-05-08 Fixed in 7.5.0, 7.3.0.7 +2 CWE-120
Priority LOW 30

Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.

CVSS 4.0MEDIUM 6.9 Local Low privileges No interaction EPSS 0.00161 Published 2025-05-08 Fixed in 7.5.0, 7.3.0.7 +2 CWE-122
Priority LOW 30

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.0.0 bef…

CVSS 4.0MEDIUM 6.9 Local Low privileges No interaction EPSS 0.00167 Published 2024-12-13 Fixed in 7.3.0.5, 6.1.2.21 +2 CWE-120
Priority LOW 29

Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Identity Spoofing.

CVSS 4.0MEDIUM 6.1 Network Low privileges No interaction EPSS 0.00255 Published 2026-06-17 Fixed in 7.7.0, 7.3.1.6 CWE-306
Load more
Open these records in search →