CVE-2026-30799 Details
Description
Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Identity Spoofing. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.6, from 6.1.0 before 6.1.*, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*.
A vulnerability allowing identity spoofing has been identified in RTI Connext Professional, specifically in versions 7.4.0 prior to 7.7.0, 7.0.0 prior to 7.3.*, 6.1.0 prior to 6.1.*, 6.0.0 prior to 6.0.* and 5.3.0 prior to 5.3.*. This vulnerability arises from missing authentication for critical functions, which could be exploited by a malicious insider to bypass origin authentication protection and impersonate another participant in the same domain.
Users can upgrade to RTI Connext Professional versions 7.7.0, 6.1.2.34 or 7.3.1.3. For other versions, patches can be requested through the RTI Customer Portal or by contacting RTI Support.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 17, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.rti.com/vulnerabilities/#cve-2026-30799 | RTI | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-306 | Missing Authentication for Critical Function | RTI |
Affected Products
| Product | Versions |
|---|---|
| rti connext professional | >= 5.3.0, < 7.7.0 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 22, 2026 | CVE Modified | RTI |
| Jul 8, 2026 | Initial Analysis | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 17, 2026 | New CVE Received | RTI |