CVE-2026-18461CWE-134

CVE-2026-18461

published September 22, 2026

CVSS
9.2
EPSS
0%
Percentile
10.3
In the wild
Unconfirmed
What it is

Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core Libraries) allows Format String Injection. This issue affects Connext Professional: from 7.5.0 before 7.7.0.1, from 7.3.0.10 before 7.3.1.6.

The record
Technical detail
CVSS
9.2 · NONE
CVSS v4.0
9.2 · CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00207 · 10.3th percentile
Weakness
CWE-134 · Use of Externally-Controlled Format String
Published
2026-09-22T22:17Z
References (1)
https://www.rti.com/vulnerabilities/#cve-2026-18461 · 3f572a00-62e2-4423-959a-7ea25eff1638
EPSS history
Timeline
  • 24 SEP 03:22Z
    EPSS moved — → 0%
    epss
  • 22 SEP 17:50Z
    Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core Libraries) allows Format String Injection.
    cvelistv5