CVE-2026-18626: Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.
Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6, from 6.1.0 before 6.1., from 6.0.0 before 6.0., from 5.3.0 before 5.3., from 5.2.0 before 5.2., from 5.0.0 before 5.1..
Affected Software
Event History
Frequently Asked Questions
Which releases are outside the affected ranges?
The issue is fixed in 7.7.0.1 and 7.3.1.6. The advisory also indicates affected ranges for 6.1.x, 6.0.x, 5.3.x, 5.2.x, and 5.0.x through 5.1.x, but does not identify specific fixed releases for those branches.
What temporary mitigation is available if an upgrade cannot be performed immediately?
No workaround or temporary mitigation is provided in the available information.
How can I determine whether my deployment is affected?
Identify the installed Connext Professional Core Libraries version and compare it with the listed ranges. Versions from 7.4.0 before 7.7.0.1 and from 7.0.0 before 7.3.1.6 are affected; the listed 6.1.x, 6.0.x, 5.3.x, 5.2.x, and 5.0.x through 5.1.x branches are also identified as affected.