CVE-2026-7300— Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Web Integration Service) allows Filter Failure through Buffer Overflow.
Possible ATT&CK Techniques 2AI
T1203 · Exploitation for Client Execution T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 3
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| RTI | Connext Professional | 7.4.0< 7.* | affected |
7.0.0< 7.3.1.3 | affected | ||
6.1.2< 6.1.* | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-7300
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Web Integration Service) allows Filter Failure through Buffer Overflow.
Source: NVD (National Vulnerability Database)
Vulnerability Description
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Web Integration Service) allows Filter Failure through Buffer Overflow.This issue affects Connext Professional: from 7.4.0 before 7.*, from 7.0.0 before 7.3.1.3, from 6.1.2 before 6.1.*.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
未进行输入大小检查的缓冲区拷贝(传统缓冲区溢出)
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| RTI | Connext Professional | 7.4.0 ~ 7.* | - |
II. Public POCs for CVE-2026-7300
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-7300
请登录查看更多情报信息。
Same Patch Batch · RTI · 2026-06-17 · 8 CVEs total
| CVE-2026-3894 | Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overr | |
| CVE-2026-2467 | Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allo | |
| CVE-2026-2675 | Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Se | |
| CVE-2026-2674 | Out-of-bounds Write vulnerability in RTI Connext Professional (Queueing Service,Core Libra | |
| CVE-2026-30799 | Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Se | |
| CVE-2026-30803 | Integer Underflow (Wrap or Wraparound) vulnerability in RTI Connext Micro (Core Libraries) | |
| CVE-2026-30802 | Out-of-bounds Read vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buf |
IV. Related Vulnerabilities
Same product: Connext Professional
- CVE-2026-2674
Out-of-bounds Write vulnerability in RTI Connext Professiona - CVE-2026-30799
Missing Authentication for Critical Function vulnerability i - CVE-2026-3894
Out-of-bounds Read vulnerability in RTI Connext Professional - CVE-2026-2675
Missing Authentication for Critical Function vulnerability i - CVE-2026-2467
Heap-based Buffer Overflow vulnerability in RTI Connext Prof
Same vendor: RTI
- CVE-2026-2674
Out-of-bounds Write vulnerability in RTI Connext Professiona - CVE-2026-30803
Integer Underflow (Wrap or Wraparound) vulnerability in RTI - CVE-2026-30802
Out-of-bounds Read vulnerability in RTI Connext Micro (Core - CVE-2026-30799
Missing Authentication for Critical Function vulnerability i - CVE-2026-3894
Out-of-bounds Read vulnerability in RTI Connext Professional
Same weakness: CWE-120
- CVE-2026-12192
GALAYOU Y4 Web Server buffer overflow - CVE-2026-11517
UTT HiPER 2610G formConfigDnsFilterGlobal strcpy buffer over - CVE-2026-11516
UTT HiPER 2610G formNatStaticMap strcpy buffer overflow - CVE-2019-25741
Mobatek MobaXterm 12.1 Buffer Overflow via Sessions File - CVE-2019-25736
LabF nfsAxe 3.7 Ping Client Buffer Overflow
V. Comments for CVE-2026-7300
No comments yet