Buffer Over-read in RTI Connext Professional Core Libraries
CVE-2026-2394

4.8MEDIUM

Key Information:

Vendor

Rti

Status
Connext Professional
Vendor
CVE Published:
1 April 2026

What is CVE-2026-2394?

A buffer over-read vulnerability exists in the RTI Connext Professional Core Libraries that may allow an attacker to read data beyond the intended limits, potentially leading to exposure of sensitive information. This affects several versions of the Connext Professional product, necessitating immediate attention and appropriate patches to mitigate risks.

Affected Version(s)

Connext Professional 7.4.0 < 7.7.0

Connext Professional 7.0.0 < 7.3.1.1

Connext Professional 6.1.0 < 6.1.*

References

https://www.rti.com/vulnerabilities/#cve-2026-2394

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.