CVE-2026-2467: Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.

Synopsis

A heap-based buffer overflow exists in the Core Libraries of RTI Connext Professional, a widely deployed middleware used in real-time distributed systems. The flaw is reachable over the network without any authentication or user interaction, derived from the CVSS:4.0 vector (AV:N/PR:N/UI:N). Successful exploitation crashes the affected service and allows limited tampering with data in connected systems. A patched-image rebuild is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The vulnerable service must be reachable over the network; an attacker sends specially crafted messages to the Connext Professional endpoint without needing local access.

• AuthenticationNot required

  No credentials or prior account access are needed; the overflow can be triggered by any unauthenticated network peer.

• Victim interactionNot required

  No user action is required; the attacker interacts directly with the Connext Professional service.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and requires no special timing, race conditions, or environmental preconditions to succeed.

Blast Radius

• Crashes the Connext Professional service, causing a denial of service for any application relying on that real-time data bus.
• Allows limited modification of data values within the affected system (low integrity impact on the vulnerable component).
• Propagates a high-availability impact to downstream or connected systems that depend on Connext data distribution (high availability impact on subsequent components).
• Allows minor data tampering in connected downstream components (low integrity impact on subsequent components).