CVE-2026-18461

Summary

Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core Libraries) allows Format String Injection. This issue affects Connext Professional: from 7.5.0 before 7.7.0.1, from 7.3.0.10 before 7.3.1.6.

Affected Software

VendorProductVersion RangeStatus
RTIConnext Professional7.5.0 < 7.7.0.1affected
RTIConnext Professional7.3.0.10 < 7.3.1.6affected

Weaknesses

  • CWE-134: CWE-134 Use of Externally-Controlled Format String

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References