← Back to CVE Explorer

CVE-2026-2674

Full vulnerability record from the local CVENow database.

Description

Out-of-bounds Write vulnerability in RTI Connext Professional (Queueing Service,Core Libraries,Persistence Service) allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.3, from 6.1.0 before 6.1.*.

Severity
MEDIUM
CVSS score
4.8 (v4.0)
Vulnerability status
Modified
Source identifier
3f572a00-62e2-4423-959a-7ea25eff1638
Published
2026-06-17 18:17:42.387000
Last modified
2026-10-26 11:10:00.157000
View original CVE JSON 
{
  "id": "CVE-2026-2674",
  "sourceIdentifier": "3f572a00-62e2-4423-959a-7ea25eff1638",
  "published": "2026-06-17T18:17:42.387",
  "lastModified": "2026-10-26T11:10:00.157",
  "vulnStatus": "Modified",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Out-of-bounds Write vulnerability in RTI Connext Professional (Queueing Service,Core Libraries,Persistence Service) allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.3, from 6.1.0 before 6.1.*."
    },
    {
      "lang": "es",
      "value": "Escritura fuera de límites, Escritura fuera de límites, Escritura fuera de límites vulnerabilidad en RTI Connext Professional (Servicio de Colas, Bibliotecas Principales, Servicio de Persistencia) permite Desbordamiento de Búferes, Desbordamiento de Búferes, Desbordamiento de Búferes. Este problema afecta a Connext Professional: desde 7.4.0 anterior a 7.7.0, desde 7.0.0 anterior a 7.3.1.3, desde 6.1.0 anterior a 6.1.*."
    }
  ],
  "affected": [
    {
      "source": "3f572a00-62e2-4423-959a-7ea25eff1638",
      "affectedData": [
        {
          "vendor": "RTI",
          "product": "Connext Professional",
          "defaultStatus": "unaffected",
          "packageName": "connext_professional",
          "modules": [
            "Queueing Service",
            "Core Libraries",
            "Persistence Service"
          ],
          "packageURL": "pkg:generic/connext_professional",
          "versions": [
            {
              "version": "7.4.0",
              "lessThan": "7.7.0",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "7.0.0",
              "lessThan": "7.3.1.3",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "6.1.0",
              "lessThan": "6.1.*",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV40": [
      {
        "source": "3f572a00-62e2-4423-959a-7ea25eff1638",
        "type": "Secondary",
        "cvssData": {
          "version": "4.0",
          "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "baseScore": 4.8,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "vulnConfidentialityImpact": "NONE",
          "vulnIntegrityImpact": "LOW",
          "vulnAvailabilityImpact": "LOW",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "subAvailabilityImpact": "NONE",
          "exploitMaturity": "NOT_DEFINED",
          "confidentialityRequirement": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "valueDensity": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
          "baseScore": 8.1,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.2
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-06-17T17:57:40.284382Z",
          "id": "CVE-2026-2674",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "3f572a00-62e2-4423-959a-7ea25eff1638",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:rti:connext_professional:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "6.1.0",
              "versionEndExcluding": "7.7.0",
              "matchCriteriaId": "B6B5FCCD-2C72-4980-B453-DF8E7356ACF2"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.rti.com/vulnerabilities/#cve-2026-2674",
      "source": "3f572a00-62e2-4423-959a-7ea25eff1638",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}