PT-2026-29442 · Rti · Rti Connext Professional

Published 2026-04-01 · Updated 2026-04-01 · CVE-2026-4374

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions RTI Connext Professional (Routing Service, Observability Collector, Recording Service, Queueing Service, Cloud Discovery Service) (affected versions not specified)

Description An improper restriction of XML External Entity Reference exists in RTI Connext Professional (Routing Service, Observability Collector, Recording Service, Queueing Service, Cloud Discovery Service). This allows for serialized data external linking and data serialization.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XXE

Weakness Enumeration

CWE-611

Related Identifiers

CVE-2026-4374

Affected Products

Rti Connext Professional

References · 5

• https://rti.com/vulnerabilities/#cve-2026-4374 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-4374 · Security Note
• https://twitter.com/cyberbivash/status/2039182690117615745 · Twitter Post
• https://twitter.com/CVEarity/status/2039309948937789635 · Twitter Post
• https://twitter.com/CVEnew/status/2039279694026301456 · Twitter Post