CVE Feed

    Dashboard / CVE / CVE-2026-18461

    CVE-2026-18461

    Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core Libraries) allows Format String Injection. This issue affects Connext Professional: from 7.5.0 before 7.7.0.1, from 7.3.0.10 before 7.3.1.6.

    Published:Sep 22, 2026
    Last Modified:Sep 22, 2026
    EPS:Sep 22, 2026
    EPSS Score:
    CVSS Score:9.2

    Affected Products

    Vendor
    Rti
    Product
    Connext Professional

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-135 Format String Injection
    CAPEC-67 String Format Overflow in syslog()

    Related CVEs

    CVE-2026-18626 (CVSS 6.8) — Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This is…
    CVE-2026-18462 (CVSS 7.3) — Integer Overflow or Wraparound, Improper Access Control vulnerability in RTI Connext Professional (Core Librar…
    CVE-2026-18460 (CVSS 6.9) — Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overfl…
    CVE-2026-18459 (CVSS 8.7) — Incorrect Calculation vulnerability in RTI Connext Professional (Core Libraries) allows Abuse Existing Functio…
    CVE-2026-18458 (CVSS 6.8) — Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Ty…
    CVE-2026-18457 (CVSS 8.3) — Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.…
    CVE-2026-11389 (CVSS 6.8) — Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Ty…
    CVE-2026-11388 (CVSS 6.9) — Double Free vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation. This issue af…
    CVE-2026-8849 (CVSS 7.7) — Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation. This iss…
    CVE-2026-7866 (CVSS 10) — Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High