CVE-2026-2675CWE-306

CVE-2026-2675

Medium · published June 17, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
29.5
In the wild
Unconfirmed
What it is

Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Fake the Source of Data. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.3, from 6.1.0 before 6.1.*, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00369 · 29.5th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-06-17T22:17Z
Affected products (1)
ProductVersionsFixed in
rti/connext_professional≥ 5.3.0, < 7.7.07.7.0
References (1)
https://www.rti.com/vulnerabilities/#cve-2026-2675 · 3f572a00-62e2-4423-959a-7ea25eff1638
EPSS history
Timeline
  • 17 JUN 17:19Z
    Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Fake the Source of Data.
    cvelistv5