← Back to CVE Explorer

CVE-2026-2675

Full vulnerability record from the local CVENow database.

Description

Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Fake the Source of Data. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.3, from 6.1.0 before 6.1.*, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*.

Severity
MEDIUM
CVSS score
6.0 (v4.0)
Vulnerability status
Modified
Source identifier
3f572a00-62e2-4423-959a-7ea25eff1638
Published
2026-06-17 18:17:42.707000
Last modified
2026-10-26 11:10:00.157000
View original CVE JSON 
{
  "id": "CVE-2026-2675",
  "sourceIdentifier": "3f572a00-62e2-4423-959a-7ea25eff1638",
  "published": "2026-06-17T18:17:42.707",
  "lastModified": "2026-10-26T11:10:00.157",
  "vulnStatus": "Modified",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Fake the Source of Data. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.3, from 6.1.0 before 6.1.*, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad por Ausencia de Autenticación para Función Crítica en RTI Connext Professional (Plugins de Seguridad) permite Falsificar la Fuente de Datos. Este problema afecta a Connext Professional: desde 7.4.0 antes de 7.7.0, desde 7.0.0 antes de 7.3.1.3, desde 6.1.0 antes de 6.1.*, desde 6.0.0 antes de 6.0.*, desde 5.3.0 antes de 5.3.*."
    }
  ],
  "affected": [
    {
      "source": "3f572a00-62e2-4423-959a-7ea25eff1638",
      "affectedData": [
        {
          "vendor": "RTI",
          "product": "Connext Professional",
          "defaultStatus": "unaffected",
          "packageName": "connext_professional",
          "modules": [
            "Security Plugins"
          ],
          "packageURL": "pkg:generic/connext_professional",
          "versions": [
            {
              "version": "7.4.0",
              "lessThan": "7.7.0",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "7.0.0",
              "lessThan": "7.3.1.3",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "6.1.0",
              "lessThan": "6.1.*",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "6.0.0",
              "lessThan": "6.0.*",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "5.3.0",
              "lessThan": "5.3.*",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV40": [
      {
        "source": "3f572a00-62e2-4423-959a-7ea25eff1638",
        "type": "Secondary",
        "cvssData": {
          "version": "4.0",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "baseScore": 6.0,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "attackRequirements": "PRESENT",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "vulnConfidentialityImpact": "NONE",
          "vulnIntegrityImpact": "HIGH",
          "vulnAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "subAvailabilityImpact": "NONE",
          "exploitMaturity": "NOT_DEFINED",
          "confidentialityRequirement": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "valueDensity": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-06-17T18:02:42.712673Z",
          "id": "CVE-2026-2675",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "3f572a00-62e2-4423-959a-7ea25eff1638",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-306"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:rti:connext_professional:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "5.3.0",
              "versionEndExcluding": "7.7.0",
              "matchCriteriaId": "3F95CC20-9460-4C5E-B56A-CE8F16028B38"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.rti.com/vulnerabilities/#cve-2026-2675",
      "source": "3f572a00-62e2-4423-959a-7ea25eff1638",
      "tags": [
        "Mitigation",
        "Vendor Advisory"
      ]
    }
  ]
}