CVE-2026-30799

Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Identity Spoofing. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.6, from 6.1.0 before 6.1.*, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*.

CVSS v3 8.1 HIGH

8.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.rti.com/vulnerabilities/#cve-2026-30799	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:rti:connext_professional:*:*:*:*:*:*:*:*

History

26 Oct 2026, 11:10

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad de falta de autenticación para función crítica en RTI Connext Professional (Plugins de Seguridad) permite la suplantación de identidad. Este problema afecta a Connext Professional: desde 7.4.0 antes de 7.7.0, desde 7.0.0 antes de 7.3., desde 6.1.0 antes de 6.1., desde 6.0.0 antes de 6.0., desde 5.3.0 antes de 5.3..

22 Sep 2026, 18:17

Type	Values Removed	Values Added
Summary	(en) Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Identity Spoofing.This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3., from 6.1.0 before 6.1., from 6.0.0 before 6.0., from 5.3.0 before 5.3..	(en) Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Identity Spoofing. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.6, from 6.1.0 before 6.1., from 6.0.0 before 6.0., from 5.3.0 before 5.3.*.

Information

Published : 2026-06-17 18:17

Updated : 2026-10-26 11:10

NVD link : CVE-2026-30799

Mitre link : CVE-2026-30799

CVE.ORG link : CVE-2026-30799

JSON object : View

Products Affected

rti

connext_professional

CWE

CWE-306

Missing Authentication for Critical Function

{"id": "CVE-2026-30799", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-30799", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-06-17T17:59:33.217064Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 5.2, "exploitabilityScore": 2.8}], "cvssMetricV40": [{"type": "Secondary", "source": "3f572a00-62e2-4423-959a-7ea25eff1638", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.1, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "3f572a00-62e2-4423-959a-7ea25eff1638", "affectedData": [{"vendor": "RTI", "modules": ["Security Plugins"], "product": "Connext Professional", "versions": [{"status": "affected", "version": "7.4.0", "lessThan": "7.7.0", "versionType": "custom"}, {"status": "affected", "version": "7.0.0", "lessThan": "7.3.1.6", "versionType": "custom"}, {"status": "affected", "version": "6.1.0", "lessThan": "6.1.*", "versionType": "custom"}, {"status": "affected", "version": "6.0.0", "lessThan": "6.0.*", "versionType": "custom"}, {"status": "affected", "version": "5.3.0", "lessThan": "5.3.*", "versionType": "custom"}], "packageURL": "pkg:generic/connext_professional", "packageName": "connext_professional", "defaultStatus": "unaffected"}]}], "published": "2026-06-17T18:17:43.007", "references": [{"url": "https://www.rti.com/vulnerabilities/#cve-2026-30799", "tags": ["Vendor Advisory"], "source": "3f572a00-62e2-4423-959a-7ea25eff1638"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "3f572a00-62e2-4423-959a-7ea25eff1638", "description": [{"lang": "en", "value": "CWE-306"}]}], "descriptions": [{"lang": "en", "value": "Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Identity Spoofing. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.6, from 6.1.0 before 6.1.*, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*."}, {"lang": "es", "value": "Una vulnerabilidad de falta de autenticaci\u00f3n para funci\u00f3n cr\u00edtica en RTI Connext Professional (Plugins de Seguridad) permite la suplantaci\u00f3n de identidad. Este problema afecta a Connext Professional: desde 7.4.0 antes de 7.7.0, desde 7.0.0 antes de 7.3.*, desde 6.1.0 antes de 6.1.*, desde 6.0.0 antes de 6.0.*, desde 5.3.0 antes de 5.3.*."}], "lastModified": "2026-10-26T11:10:00.157", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:rti:connext_professional:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F95CC20-9460-4C5E-B56A-CE8F16028B38", "versionEndExcluding": "7.7.0", "versionStartIncluding": "5.3.0"}], "operator": "OR"}]}], "sourceIdentifier": "3f572a00-62e2-4423-959a-7ea25eff1638"}