CVE-2025-14543CWE-611xxe

CVE-2025-14543

Critical · published April 30, 2026

CVSS v3.1
9.1
EPSS
0%
Percentile
10.0
In the wild
Unconfirmed
What it is

Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Core Libraries) allows Serialized Data External Linking. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.1, from 6.1.0 before 6.1.*, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*, from 5.2.0 before 5.2.*, from 4.3x before 5.1.*.

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00205 · 10.0th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2026-04-30T20:16Z
Affected products (6)
ProductVersionsFixed in
rti/connext_professional≥ 4.3.0, ≤ 5.2.3—
rti/connext_professional≥ 5.3.0, ≤ 5.3.1.45—
rti/connext_professional≥ 6.0.0, ≤ 6.0.1.40—
rti/connext_professional≥ 6.1.0, ≤ 6.1.2.27—
rti/connext_professional≥ 7.0.0, < 7.3.1.17.3.1.1
rti/connext_professional≥ 7.4.0, < 7.7.07.7.0
References (1)
https://www.rti.com/vulnerabilities/#cve-2025-14543 · 3f572a00-62e2-4423-959a-7ea25eff1638
EPSS history
Timeline
  • 30 APR 15:25Z
    Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Core Libraries) allows Serialized Data External Linking.
    cvelistv5