CVE-2026-18626
Received Received - Intake

Out-of-bounds Read in RTI Connext Professional

Publication date: 2026-09-22

Last updated on: 2026-09-22

Assigner: RTI

Description
Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6, from 6.1.0 before 6.1.*, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*, from 5.2.0 before 5.2.*, from 5.0.0 before 5.1.*.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-22
Last Modified
2026-09-22
Generated
2026-09-22
AI Q&A
2026-09-22
EPSS Evaluated
N/A
NVD
CVE-2026-18626
EUVD
EUVD-2026-84618

Affected Vendors & Products

Showing 7 associated CPEs
Vendor Product Version / Range
rti connext_professional From 7.4.0 (inc) to 7.7.0.1 (exc)
rti connext_professional From 7.0.0 (inc) to 7.3.1.6 (exc)
rti connext_professional From 6.1.0 (inc) to 6.1.* (exc)
rti connext_professional From 6.0.0 (inc) to 6.0.* (exc)
rti connext_professional From 5.3.0 (inc) to 5.3.* (exc)
rti connext_professional From 5.2.0 (inc) to 5.2.* (exc)
rti connext_professional From 5.0.0 (inc) to 5.1.* (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) that allows attackers to overread memory buffers. It affects multiple versions of the software, specifically those before 7.7.0.1, 7.3.1.6, 6.1.*, 6.0.*, 5.3.*, 5.2.*, and 5.1.*.

Detection Guidance

Detection requires checking installed RTI Connext Professional versions against affected ranges (7.4.0 to 7.7.0.1, 7.0.0 to 7.3.1.6, or older versions). Use package managers like 'dpkg -l' or 'rpm -qa' to list installed packages and compare versions.

Impact Analysis

An attacker could exploit this to read sensitive data from memory, potentially leading to information disclosure or system crashes. The vulnerability has a CVSS v4.0 base score of 6.8, indicating moderate severity with high impact on availability.

Compliance Impact

The provided CVE data does not specify direct impacts on compliance with GDPR, HIPAA, or other standards. The vulnerability involves an out-of-bounds read in RTI Connext Professional, which could potentially lead to unauthorized data access or disclosure. Such risks may affect compliance if exploited, but no explicit details are provided in the CVE context.

Mitigation Strategies

Update RTI Connext Professional to a patched version (7.7.0.1 or later, 7.3.1.6 or later, or newer than 6.1.0, 6.0.0, 5.3.0, 5.2.0, 5.1.0 depending on your current version).

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-18626. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart