VULNERABILITY INTELLIGENCE
CVE-2026-2675
CVSS score6.5 MEDIUM
EPSS probability0.21%
CISA KEVNot currently listed
Published2026-06-17
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Description
Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Fake the Source of Data. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.3, from 6.1.0 before 6.1.*, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*.
Weakness classification
- 3f572a00-62e2-4423-959a-7ea25eff1638: CWE-306
Primary references
- 3f572a00-62e2-4423-959a-7ea25eff1638 — Mitigation, Vendor Advisory