Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| RTI | Connext Professional | unaffected |
|
No data.
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
| Link | Providers |
|---|---|
| https://www.rti.com/vulnerabilities/#cve-2026-18458 |
|
Tue, 22 Sep 2026 18:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.3.0 before 7.3.1.6, from 6.1.2.21 before 6.1.*. | |
| Title | Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. | |
| First Time appeared |
Rti
Rti connext Professional |
|
| Weaknesses | CWE-125 CWE-685 CWE-843 |
|
| CPEs | cpe:2.3:a:rti:connext_professional:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Rti
Rti connext Professional |
|
| References |
| |
| Metrics |
cvssV4_0
|
MITRE
Status: PUBLISHED
Assigner: RTI
Published:
Updated: 2026-09-22T18:48:29.246Z
Reserved: 2026-07-31T07:29:34.430Z
Link: CVE-2026-18458
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-09-22T18:17:11.640
Modified: 2026-09-22T18:17:11.640
Link: CVE-2026-18458
Redhat
No data.
OpenCVE Enrichment
No data.