CVE-2026-18458CWE-125CWE-685CWE-843

CVE-2026-18458

published September 22, 2026

CVSS
6.8
EPSS
0%
Percentile
1.0
In the wild
Unconfirmed
What it is

Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.3.0 before 7.3.1.6, from 6.1.2.21 before 6.1.*.

The record
Technical detail
CVSS
6.8 · NONE
CVSS v4.0
6.8 · CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00104 · 1.0th percentile
Weaknesses
CWE-125 · Out-of-bounds Read; CWE-685 · Function Call With Incorrect Number of Arguments; CWE-843 · Access of Resource Using Incompatible Type ('Type Confusion')
Published
2026-09-22T22:17Z
References (1)
https://www.rti.com/vulnerabilities/#cve-2026-18458 · 3f572a00-62e2-4423-959a-7ea25eff1638
EPSS history
Timeline
  • 24 SEP 03:22Z
    EPSS moved — → 0%
    epss
  • 22 SEP 17:50Z
    Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.
    cvelistv5