What is the CVSS score of CVE-2026-7300?

CVE-2026-7300 has a CVSS 4.0 base score of 8.8 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N. EPSS exploitation probability: 0.3%.

How to fix or mitigate CVE-2026-7300?

Within 24 hours: Identify all systems running RTI Connext Professional versions 7.0.0 through 7.3.1.2, 6.1.2, and earlier; enable detailed logging for Web Integration Service access. Within 7 days: Deploy firewall rules restricting Web Integration Service network access to authorized systems only; implement monitoring and alerting for abnormal connection patterns. Within 30 days: Contact RTI to confirm patched versions and timeline; test and deploy patches to all affected systems once available; evaluate business continuity alternatives if patch timeline exceeds acceptable risk window.

RTI Connext Professional CVE-2026-7300

HIGH

Classic Buffer Overflow (CWE-120)

2026-06-17 RTI

Buffer Overflow Connext Professional Rti

8.8

CVSS 4.0 · Vendor: RTI

View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

Access

Identify exposed Web Integration Service endpoint
Delivery

Craft oversized request bypassing input filter
Exploit

Trigger buffer overflow in parser
Execution

Corrupt adjacent memory and crash service
Impact

Disrupt DDS-to-web data bridge

Vulnerability Assessment

Weakness	CWE CWE-120 ASVS 5.0 V15 - Secure Coding and Architecture Buffer copy size validation MITRE ATT&CK 1 technique across 1 tactic: Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. Sign in to read
Exploitation Conditions	Exploitation requires network reachability to the RTI Connext Professional Web Integration Service component specifically - deployments that do not enable or expose the Web Integration Service are not exploitable through this flaw. Per CVSS 4.0 PR:N/UI:N/AT:N, no authentication, user interaction, or special attack requirements are needed once the service endpoint is reachable. Limiting factors: the Web Integration Service is an optional component and is frequently deployed only on internal networks or behind reverse proxies, and the high availability / low confidentiality-integrity impact profile suggests the realistic outcome is a service crash rather than reliable arbitrary code execution.
Impact	The CVSS 4.0 vector AV:N/AC:L/AT:N/PR:N/UI:N indicates a fully remote, unauthenticated, low-complexity attack with no user interaction - the highest-exposure precondition profile. However, the impact metrics (VC:L/VI:L/VA:H) point to availability as the dominant outcome with only limited confidentiality and integrity exposure, suggesting a service crash rather than reliable code execution. EPSS data was not provided and the CVE is not listed in CISA KEV, and no public exploit identified at time of analysis. Real-world risk is elevated where the Web Integration Service is exposed beyond a trusted network boundary, which is common in IoT/industrial gateways but not in air-gapped DDS deployments; defenders should treat this as a high-priority availability risk for any internet- or DMZ-facing Connext deployment.
Exploit ScenarioDerived	An attacker who can reach the Web Integration Service over the network sends a single crafted HTTP or WebSocket request containing an oversized field that bypasses the input filter and overflows a fixed-size buffer in the parsing routine. The Web Integration Service crashes, severing the bridge between DDS topics and web clients and disrupting real-time data flow to operator dashboards or downstream consumers; no public exploit identified at time of analysis, so this remains a theoretical chain pending vendor or third-party PoC release.

This Week Schedule remediation this week. Why: HIGH severity (CVSS 7.0-8.9).

No patch listed yet 0.3% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Jun 17, 2026

Remote denial of service and partial data exposure in RTI Connext Professional's Web Integration Service results from a classic buffer overflow (CWE-120) reachable over the network without authentication. Versions 7.4.0 before 7.x, 7.0.0 before 7.3.1.3, and 6.1.2 before 6.1.x are vulnerable, and no public exploit identified at time of analysis. The CVSS 4.0 score of 8.8 reflects high availability impact with low confidentiality and integrity impact, consistent with a filter-failure overflow that crashes the service rather than yielding full code execution.

RemediationAI

Upgrade RTI Connext Professional to 7.3.1.3 or later on the 7.0-7.3 branch, and to the fixed 6.1.x or 7.4.x maintenance release as published by RTI per https://www.rti.com/vulnerabilities/#cve-2026-7300 (Vendor-released patch: 7.3.1.3 for the 7.0-7.3 line; consult the advisory for exact 6.1.x and 7.4.x fix builds). Until patching is possible, restrict network reachability of the Web Integration Service to trusted management VLANs by firewalling its listener port, place it behind an authenticating reverse proxy or WAF that enforces request-size limits on the affected endpoints, and disable or unload the Web Integration Service if it is not in active use - accepting the trade-off that web-based DDS clients will lose connectivity. Monitor the service for unexpected restarts or crash dumps as a high-signal indicator of exploitation attempts.

Affects your stack

Find out whether the stacks and servers you run are on an affected version.

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

RTI Connext Professional is a Data Distribution Service (DDS) middleware platform widely used in real-time and mission-critical systems (defense, robotics, autonomous vehicles, medical devices). The vulnerable component is the Web Integration Service, which bridges DDS topics to web clients over HTTP/WebSocket. CWE-120 (Classic Buffer Overflow) indicates that input data is copied into a fixed-size buffer without proper length validation; the description characterizes the consequence as 'Filter Failure through Buffer Overflow', meaning oversized input bypasses a filter check and corrupts adjacent memory in the parsing path.

Know when Connext Professional gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

Vendor (RTI) PRIMARY 8.8 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N

vuln.today AI 8.6 HIGH

Web Integration Service is network-reachable with no auth or user interaction; overflow yields a service crash (A:H) with limited memory disclosure/corruption (C:L/I:L), no scope change.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (RTI).

CVSS VectorVendor: RTI

Attack Vector

Network

Attack Complexity

Low

Attack Requirements

None

Privileges Required

None

User Interaction

None

Vulnerable system: Confidentiality

Low

Vulnerable system: Integrity

Low

Vulnerable system: Availability

High

Subsequent system: Confidentiality

None

Subsequent system: Integrity

None

Subsequent system: Availability

None

DescriptionCVE.org

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Web Integration Service) allows Filter Failure through Buffer Overflow.This issue affects Connext Professional: from 7.4.0 before 7.*, from 7.0.0 before 7.3.1.3, from 6.1.2 before 6.1.*.

Executive ViewAI

Why It Matters

RTI Connext Professional Web Integration Service contains a high-severity vulnerability (CVSS 8.8) allowing unauthenticated attackers to disrupt service and access partial data, with no vendor patch currently available. Organizations using affected versions face operational risk through potential service outages and data exposure. Immediate implementation of network protective measures is required to reduce exposure while awaiting patch availability.

Business Impact: High

Compensating Controls

No vendor-released patch identified at time of analysis. Interim mitigations: Restrict network access to Web Integration Service through firewall rules, allowing connections only from authorized systems. Implement comprehensive logging and real-time monitoring of all network traffic to the vulnerable service with alerting on abnormal patterns. Isolate affected systems from untrusted networks and external internet connectivity. Maintain detailed inventory of all affected systems to enable rapid patch deployment once available.

Threat Intelligence Overview

EPSS Score

0.3%

Top 80% exploitable

Data Quality

5 sources

Confidence: Medium

NVD

CVE.org

EPSS

Vulnrichment

VulDB

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity HIGH

CISA KEV No

Public POC No

EPSS 0.3%

Patch available No

Active threat No

Deciding rule

HIGH severity (CVSS 7.0-8.9)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision

Scheduled

Exploitation

None

System Exposure· derived

Open

Automatable

Yes

Human Impact

High

Technical Impact

Partial

Priority Score

Low Medium High Critical

KEV: 0

EPSS: 0

CVSS: +44

PoC: 0

Weaponized: 0

Threat intel: 0

Gov advisory: 0

Attack Technique

Buffer Overflow HIGH

A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.