Product by RTI
Connext Professional
43 known vulnerabilities in Connext Professional (RTI), 0 of them actively exploited (CISA KEV).
Key figures
43
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
12
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-38487 | RTI Connext Professional: Insufficient Control of Network Message Volume (Network Amplification) | 8.2 | |
| Critical | CVE-2026-7866 | RTI Connext Professional: Stack-based Buffer Overflow | — | |
| High | CVE-2026-18459 | RTI Connext Professional: Incorrect Calculation | — | |
| High | CVE-2026-18457 | RTI Connext Professional: Heap-based Buffer Overflow | — | |
| Critical | CVE-2026-18461 | RTI Connext Professional: Use of Externally-Controlled Format String | — | |
| Critical | CVE-2021-38435 | RTI Connext DDS Professional and Connext DDS Secure Incorrect Calculation of Buffer Size | 6.6 | |
| High | CVE-2026-8849 | RTI Connext Professional: Use After Free | — | |
| Medium | CVE-2026-18460 | RTI Connext Professional: Off-by-one Error | — | |
| High | CVE-2024-52058 | Potential arbitrary command execution in System Designer while parsing malicious HTTP/REST requests | 7.8 | |
| Critical | CVE-2024-52061 | Potential stack buffer overflow when parsing an XML type | 9.8 | |
| Critical | CVE-2024-52057 | RTI Connext Professional: SQL Injection | 9.8 | |
| Critical | CVE-2026-3894 | RTI Connext Professional: Out-of-bounds Read | 9.1 | |
| Critical | CVE-2026-2467 | RTI Connext Professional: Heap-based Buffer Overflow | 8.1 | |
| High | CVE-2026-7300 | RTI Connext Professional: Classic Buffer Overflow | 6.5 | |
| High | CVE-2026-18462 | RTI Connext Professional: Integer Overflow or Wraparound | — | |
| Critical | CVE-2025-4993 | RTI Connext Professional: Untrusted Pointer Dereference | 9.1 | |
| Critical | CVE-2025-1255 | RTI Connext Professional: Untrusted Pointer Dereference | 9.1 | |
| Critical | CVE-2025-14543 | RTI Connext Professional: Improper Restriction of XML External Entity Reference | 9.1 | |
| Critical | CVE-2026-4374 | RTI Connext Professional: Improper Restriction of XML External Entity Reference | 9.1 | |
| Medium | CVE-2026-18458 | RTI Connext Professional: Function Call With Incorrect Number of Arguments | — | |
| Medium | CVE-2026-11388 | RTI Connext Professional: Double Free | — | |
| Medium | CVE-2026-18626 | RTI Connext Professional: Out-of-bounds Read | — | |
| Medium | CVE-2026-11389 | RTI Connext Professional: Function Call With Incorrect Number of Arguments | — | |
| High | CVE-2026-30799 | RTI Connext Professional: Missing Authentication for Critical Function | 8.1 | |
| High | CVE-2026-2674 | RTI Connext Professional: Out-of-bounds Write | 8.1 |