Out-of-bounds Write Vulnerability in RTI Connext Professional by RTI
CVE-2026-2674

4.8MEDIUM

Key Information:

Vendor

Rti

Status
Connext Professional
Vendor
CVE Published:
17 June 2026

What is CVE-2026-2674?

An out-of-bounds write vulnerability exists in RTI Connext Professional affecting the Queueing Service, Core Libraries, and Persistence Service. This flaw may allow attackers to exploit memory operations and cause buffer overflows, potentially leading to unauthorized access or services disruption. Affected versions include 7.0.0 to 7.3.1.2, 7.4.0 to 7.6.999, and 6.1.0 up to 6.1.*. Organizations using these versions should prioritize patching to safeguard their systems.

Affected Version(s)

Connext Professional 7.4.0 < 7.7.0

Connext Professional 7.0.0 < 7.3.1.3

Connext Professional 6.1.0 < 6.1.*

References

https://www.rti.com/vulnerabilities/#cve-2026-2674

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.