Is CVE-2026-30799 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-30799 being exploited in the wild.

How severe is CVE-2026-30799?

Informational severity, with a CVSS score of 6.1, published 17 June 2026.

Which products and versions are affected?

Rti Connext Professional (Security Plugins) 7.4.0 before 7.7.0, 7.0.0 before 7.3.*, 6.1.0 before 6.1.*, 6.0.0 before 6.0.*, 5.3.0 before 5.3.*.

Is there a fix for CVE-2026-30799?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-30799 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-30799?

Check whether you run Rti Connext Professional (Security Plugins) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-30799: RTI Connext Professional identity spoofing in Security Plugins

CVE-2026-30799 · Severity: info · CVSS 6.1 · Published 2026-06-17

A vulnerability in the security plugins of RTI Connext Professional, a widely used middleware for industrial and mission-critical systems, allows an attacker to spoof identities. By bypassing authentication for critical functions, an unauthorized user could impersonate legitimate system components, potentially leading to unauthorized data modification or service disruption. This could impact the integrity and reliability of communications in environments like aerospace, defense, or critical infrastructure.

Vendors: Rti.

Quick answers

Is CVE-2026-30799 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-30799 being exploited in the wild.
How severe is CVE-2026-30799?: Informational severity, with a CVSS score of 6.1, published 17 June 2026.
Which products and versions are affected?: Rti Connext Professional (Security Plugins) 7.4.0 before 7.7.0, 7.0.0 before 7.3.*, 6.1.0 before 6.1.*, 6.0.0 before 6.0.*, 5.3.0 before 5.3.*.
Is there a fix for CVE-2026-30799?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-30799 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-30799?: Check whether you run Rti Connext Professional (Security Plugins) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A Missing Authentication for Critical Function vulnerability (CWE-306) exists in the Security Plugins of RTI Connext Professional. The flaw allows an attacker with low privileges to bypass authentication mechanisms and spoof identities within the DDS (Data Distribution Service) network. According to the CVSS 4.0 vector, the attack requires a specific 'threat' or environmental condition (AT:P) but can be executed over the network without user interaction. Successful exploitation can lead to high impacts on system integrity and availability. Affected versions include various releases across the 5.3.x, 6.x, 7.0.x, and 7.4.x branches; users are advised to upgrade to versions 7.7.0 or other patched releases as specified by the vendor.

Affected products

RTI Connext Professional (Security Plugins) 7.4.0 before 7.7.0, 7.0.0 before 7.3.*, 6.1.0 before 6.1.*, 6.0.0 before 6.0.*, 5.3.0 before 5.3.*

Timeline

2026-06-17: disclosed
2026-06-17: advisory

References

https://www.rti.com/vulnerabilities/

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.