CVE-2025-10450CWE-359

CVE-2025-10450

High · published December 16, 2025

CVSS v3.1

7.5

EPSS

Percentile

13.0

In the wild

Unconfirmed

What it is

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in RTI Connext Professional (Core Libraries) allows Sniffing Network Traffic. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.2.0 before 7.3.1.

The record

Technical detail

CVSS v3.1: 7.5 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.00229 · 13.0th percentile
Weakness: CWE-359 · Exposure of Private Personal Information to an Unauthorized Actor
Published: 2025-12-16T21:15Z

Affected products (2)

Product	Versions	Fixed in
rti/connext_professional	≥ 7.2.0, < 7.3.1	7.3.1
rti/connext_professional	≥ 7.4.0, ≤ 7.6.0	—

References (1)

https://www.rti.com/vulnerabilities/#cve-2025-10450 · 3f572a00-62e2-4423-959a-7ea25eff1638

EPSS history

Timeline

16 DEC 16:09Z
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in RTI Connext Professional (Core Libraries) allows Sniffing Network Traffic.
cvelistv5