CVE-2026-18460
Awaiting Analysis Awaiting Analysis - Queue

Buffer Overflow in RTI Connext Professional Core Libraries

Publication date: 2026-09-22

Last updated on: 2026-09-22

Assigner: RTI

Description
Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-22
Last Modified
2026-09-22
Generated
2026-10-13
AI Q&A
2026-09-22
EPSS Evaluated
2026-10-11
NVD
CVE-2026-18460
EUVD
EUVD-2026-84615

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
rti connext_professional From 7.4.0 (inc) to 7.7.0.1 (exc)
rti connext_professional From 7.0.0 (inc) to 7.3.1.6 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.
CWE-193 A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an off-by-one error and out-of-bounds write vulnerability in RTI Connext Professional (Core Libraries) that allows buffer overflows. It affects versions from 7.4.0 before 7.7.0.1 and from 7.0.0 before 7.3.1.6.

Detection Guidance

Detection of this vulnerability requires checking the installed version of RTI Connext Professional. Compare your version against the affected ranges (7.4.0 to 7.7.0.0 and 7.0.0 to 7.3.1.5). Use commands like 'nddspy --version' or check installation directories for version files.

Impact Analysis

An attacker could exploit this to execute arbitrary code, crash the system, or gain unauthorized access. The CVSS score of 6.9 indicates a high severity with potential for significant impact.

Compliance Impact

The vulnerability involves buffer overflows and out-of-bounds writes in RTI Connext Professional, which could lead to unauthorized memory access or application instability. This may compromise data integrity and confidentiality, potentially violating GDPR's data protection requirements or HIPAA's safeguards for protected health information if exploited.

Mitigation Strategies

Update RTI Connext Professional to a patched version. For Connext Professional, upgrade to 7.7.0.1 or later if using 7.4.0 or newer. For versions 7.0.0 to 7.3.1, upgrade to 7.3.1.6 or later.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-18460. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart