# cve.now: RTI

The newest entries naming RTI as an affected vendor (up to 200), of 44 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-18626](https://cve.now/CVE-2026-18626.md): Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. (CVSS 6.8)
- [CVE-2026-18462](https://cve.now/CVE-2026-18462.md): Integer Overflow or Wraparound, Improper Access Control vulnerability in RTI Connext Professional (Core Libraries) allows Shared Resource Manipulation. (CVSS 7.3)
- [CVE-2026-18461](https://cve.now/CVE-2026-18461.md): Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core Libraries) allows Format String Injection. (CVSS 9.2)
- [CVE-2026-18460](https://cve.now/CVE-2026-18460.md): Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. (CVSS 6.9)
- [CVE-2026-18459](https://cve.now/CVE-2026-18459.md): Incorrect Calculation vulnerability in RTI Connext Professional (Core Libraries) allows Abuse Existing Functionality. (CVSS 8.7)
- [CVE-2026-18458](https://cve.now/CVE-2026-18458.md): Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. (CVSS 6.8)
- [CVE-2026-18457](https://cve.now/CVE-2026-18457.md): Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. (CVSS 8.3)
- [CVE-2026-11389](https://cve.now/CVE-2026-11389.md): Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. (CVSS 6.8)
- [CVE-2026-11388](https://cve.now/CVE-2026-11388.md): Double Free vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation. (CVSS 6.9)
- [CVE-2026-8849](https://cve.now/CVE-2026-8849.md): Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation. (CVSS 7.7)
- [CVE-2026-7866](https://cve.now/CVE-2026-7866.md): Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. (CVSS 10.0)
- [CVE-2026-2674](https://cve.now/CVE-2026-2674.md): Out-of-bounds Write vulnerability in RTI Connext Professional (Queueing Service,Core Libraries,Persistence Service) allows Overflow Buffers. (CVSS 4.8)
- [CVE-2026-30803](https://cve.now/CVE-2026-30803.md): Integer Underflow (Wrap or Wraparound) vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers. (CVSS 8.8)
- [CVE-2026-30802](https://cve.now/CVE-2026-30802.md): Out-of-bounds Read vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers. (CVSS 8.8)
- [CVE-2026-30799](https://cve.now/CVE-2026-30799.md): Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Identity Spoofing. (CVSS 6.1)
- [CVE-2026-7300](https://cve.now/CVE-2026-7300.md): Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Web Integration Service) allows Filter Failure through Buffer Overflow. (CVSS 8.8)
- [CVE-2026-3894](https://cve.now/CVE-2026-3894.md): Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. (CVSS 9.2)
- [CVE-2026-2675](https://cve.now/CVE-2026-2675.md): Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Fake the Source of Data. (CVSS 6.0)
- [CVE-2026-2467](https://cve.now/CVE-2026-2467.md): Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags. (CVSS 9.2)
- [CVE-2025-14543](https://cve.now/CVE-2025-14543.md): Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Core Libraries) allows Serialized Data External Linking. (CVSS 8.8)
- [CVE-2026-4374](https://cve.now/CVE-2026-4374.md): Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Recording Service,Routing Service,Queueing Service,Cloud Discovery Service,Observability Collector) allows Serialized Data External Linking, Data Serializat... (CVSS 8.8)
- [CVE-2026-2394](https://cve.now/CVE-2026-2394.md): Buffer Over-read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. (CVSS 6.3)
- [CVE-2025-10450](https://cve.now/CVE-2025-10450.md): Exposure of Private Personal Information to an Unauthorized Actor vulnerability in RTI Connext Professional (Core Libraries) allows Sniffing Network Traffic. (CVSS 8.3)
- [CVE-2025-8410](https://cve.now/CVE-2025-8410.md): Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation. (CVSS 5.8)
- [CVE-2025-4993](https://cve.now/CVE-2025-4993.md): Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation. (CVSS 8.3)
- [CVE-2025-4582](https://cve.now/CVE-2025-4582.md): Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation, Overread Buffers. (CVSS 4.8)
- [CVE-2025-1255](https://cve.now/CVE-2025-1255.md): Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation. (CVSS 8.3)
- [CVE-2025-1254](https://cve.now/CVE-2025-1254.md): Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Recording Service) allows Overflow Buffers, Overread Buffers. (CVSS 7.7)
- [CVE-2025-1253](https://cve.now/CVE-2025-1253.md): Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags. (CVSS 6.9)
- [CVE-2025-1252](https://cve.now/CVE-2025-1252.md): Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags. (CVSS 6.9)
- [CVE-2024-52066](https://cve.now/CVE-2024-52066.md): Potential stack corruption in Routing Service when using a malicious XML configuration document (CVSS 8.3)
- [CVE-2024-52065](https://cve.now/CVE-2024-52065.md): Potential stack buffer write overflow in Persistence Service while parsing malicious environment variable on non-Windows systems (CVSS 6.9)
- [CVE-2024-52064](https://cve.now/CVE-2024-52064.md): Potential stack buffer write overflow in Connext applications while parsing malicious license file (CVSS 6.9)
- [CVE-2024-52063](https://cve.now/CVE-2024-52063.md): Potential stack buffer write overflow in Connext applications while parsing malicious XML types document (CVSS 8.3)
- [CVE-2024-52062](https://cve.now/CVE-2024-52062.md): Potential stack buffer write overflow in Connext applications while parsing malicious XML types document (CVSS 6.9)
- [CVE-2024-52061](https://cve.now/CVE-2024-52061.md): Potential stack buffer overflow when parsing an XML type (CVSS 8.3)
- [CVE-2024-52060](https://cve.now/CVE-2024-52060.md): Potential stack overflow when using XML configuration file referencing environment variables (CVSS 8.3)
- [CVE-2024-52059](https://cve.now/CVE-2024-52059.md): Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Heap-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in RTI Connext Professional (Security Plugins) allows Overflow Variables and Tags. (CVSS 6.9)
- [CVE-2024-52058](https://cve.now/CVE-2024-52058.md): Potential arbitrary command execution in System Designer while parsing malicious HTTP/REST requests (CVSS 8.6)
- [CVE-2024-52057](https://cve.now/CVE-2024-52057.md): Potential arbitrary SQL query execution in Queuing Service while parsing malicious remote commands or configuration files (CVSS 9.1)
- [CVE-2021-38435](https://cve.now/CVE-2021-38435.md): RTI Connext DDS Professional and Connext DDS Secure Incorrect Calculation of Buffer Size (CVSS 6.6)
- [CVE-2021-38433](https://cve.now/CVE-2021-38433.md): RTI Connext DDS Professional and Connext DDS Secure Stack-based Buffer Overflow (CVSS 6.6)
- [CVE-2021-38427](https://cve.now/CVE-2021-38427.md): RTI Connext DDS Professional and Connext DDS Secure Stack-based Buffer Overflow (CVSS 6.6)
- [CVE-2021-38487](https://cve.now/CVE-2021-38487.md): Potential Network Amplification and Information Exposure in RTI Connext Professional and Connext Micro (CVSS 8.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/rti
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.