CVE Feed

    Dashboard / CVE / CVE-2026-11389

    CVE-2026-11389

    Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.3.0 before 7.3.1.6.

    Published:Sep 22, 2026
    Last Modified:Sep 22, 2026
    EPS:Sep 22, 2026
    EPSS Score:
    CVSS Score:6.8

    Affected Products

    Vendor
    Rti
    Product
    Connext Professional

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2026-18626 (CVSS 6.8) — Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This is…
    CVE-2026-18462 (CVSS 7.3) — Integer Overflow or Wraparound, Improper Access Control vulnerability in RTI Connext Professional (Core Librar…
    CVE-2026-18461 (CVSS 9.2) — Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core Libraries) allows F…
    CVE-2026-18460 (CVSS 6.9) — Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overfl…
    CVE-2026-18459 (CVSS 8.7) — Incorrect Calculation vulnerability in RTI Connext Professional (Core Libraries) allows Abuse Existing Functio…
    CVE-2026-18458 (CVSS 6.8) — Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Ty…
    CVE-2026-18457 (CVSS 8.3) — Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.…
    CVE-2026-11388 (CVSS 6.9) — Double Free vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation. This issue af…
    CVE-2026-8849 (CVSS 7.7) — Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation. This iss…
    CVE-2026-7866 (CVSS 10) — Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High