CVE-2026-4374
Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Recording Service,Routing Service,Queueing Service,Cloud Discovery Service,Observability Collector) allows Serialized Data External Linking, Data Serializat...
CVSS Skor
8.8
EPSS İhtimal
%0.4
Risk Skoru
0.0
Yayın
6 ay önce
Vulnerability Timeline (Değişiklik ve Güncelleme Geçmişi)
CVE-2026-4374 zafiyeti üzerinde NVD, CISA ve MITRE tarafından yapılan tarihsel değişiklikler:
| Tarih | Aktör / Kaynak | İşlem / Açıklama | Tür | Önceki Değer | Yeni Değer |
|---|---|---|---|---|---|
| 22.09.2026 | nvd@nist.gov | Initial Analysis & CVSS Vector Assignment | CVSS V3.1 | — | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N |
| 01.04.2026 | CISA Coordinator | SSVC Risk Re-assessment | SSVC / KEV | exploitation: none | exploitation: none |
| 01.04.2026 | MITRE / NVD | New CVE Record Received & Ingested | CVE Created | — | CVE-2026-4374 |
İlgili Benzer Açıklar
8.8
CVE-2026-30803
Integer Underflow (Wrap or Wraparound) vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers.
R
Yama durumu bilinmiyorEPSS %1
8.8
CVE-2026-30802
Out-of-bounds Read vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers.
R
Yama durumu bilinmiyorEPSS %0
8.8
CVE-2026-7300
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Web Integration Service) allows Filter Failure through Buffer Overflow.
R
Yama durumu bilinmiyorEPSS %0
10.0
CVE-2026-7866
Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.
R
Yama durumu bilinmiyorEPSS %0
8.3
CVE-2025-4993
Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.
R
Yama durumu bilinmiyorEPSS %0
8.3
CVE-2025-1255
Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.
R
Yama durumu bilinmiyorEPSS %0
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-4374"