Is CVE-2026-7300 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-7300 being exploited in the wild.

How severe is CVE-2026-7300?

Informational severity, with a CVSS score of 8.8, published 17 June 2026.

Which products and versions are affected?

Rti Connext Professional Web Integration Service 7.4.0 before 7.*, 7.0.0 before 7.3.1.3, 6.1.2 before 6.1.*.

Is there a fix for CVE-2026-7300?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-7300 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-7300?

Check whether you run Rti Connext Professional Web Integration Service at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-7300: RTI Connext Professional Buffer Overflow in Web Integration Service

CVE-2026-7300 · Severity: info · CVSS 8.8 · Published 2026-06-17

RTI Connext Professional is a software framework used for sharing data between different applications and devices in real-time systems. A security flaw in its Web Integration Service component could allow an attacker to cause a system crash or bypass security filters by sending specially crafted data. This could lead to service outages or the failure of critical data filtering mechanisms in industrial or enterprise environments.

Vendors: Rti.

Quick answers

Is CVE-2026-7300 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-7300 being exploited in the wild.
How severe is CVE-2026-7300?: Informational severity, with a CVSS score of 8.8, published 17 June 2026.
Which products and versions are affected?: Rti Connext Professional Web Integration Service 7.4.0 before 7.*, 7.0.0 before 7.3.1.3, 6.1.2 before 6.1.*.
Is there a fix for CVE-2026-7300?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-7300 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-7300?: Check whether you run Rti Connext Professional Web Integration Service at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A 'Classic Buffer Overflow' (CWE-120) exists in the Web Integration Service component of RTI Connext Professional. The vulnerability is caused by a buffer copy operation that does not properly check the size of the input, leading to memory corruption. An unauthenticated attacker can exploit this over the network to cause a 'Filter Failure' or a denial-of-service (DoS) condition. The issue affects multiple versions across the 6.1.x, 7.0.x, and 7.4.x release branches. Users are advised to update to patched versions such as 7.3.1.3 or later as specified in the vendor's advisory.

Affected products

RTI Connext Professional (Web Integration Service) 7.4.0 before 7.*, 7.0.0 before 7.3.1.3, 6.1.2 before 6.1.*

Timeline

2026-06-17: disclosed
2026-06-17: advisory

References

https://www.rti.com/vulnerabilities/

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.