CVE-2026-30799 RTI CVE debrief

Who should care

Users of RTI Connext Professional (Security Plugins) versions from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.*, from 6.1.0 before 6.1.*, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.* should review and apply patches or mitigations. This includes operators, platform administrators, vulnerability management teams, and security teams who need to assess and mitigate potential impacts.

Technical summary

CVE-2026-30799 is a Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) that allows Identity Spoofing. The vulnerability affects Connext Professional versions from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.*, from 6.1.0 before 6.1.*, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*. This issue has a CVSS score of 6.1 and a Medium severity. Users of affected versions should review and apply patches or mitigations.

Defensive priority

Medium priority due to CVSS score of 6.1 and potential for Identity Spoofing.

Recommended defensive actions

• Review and apply patches or mitigations for RTI Connext Professional (Security Plugins) versions from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.*, from 6.1.0 before 6.1.*, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*
• Verify inventory of RTI Connext Professional (Security Plugins) to identify potentially affected systems
• Implement compensating controls such as network segmentation or access controls to limit potential impact
• Monitor for suspicious activity or anomalies in RTI Connext Professional (Security Plugins) logs
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.

Evidence notes

Evidence is based on official CVE and NVD records, as well as vendor advisories. Limited details are available on exploitability and potential impact. Defenders should verify affected product deployments, review official advisories, and plan for vendor-supported updates or mitigations. The CVE record was published on 2026-06-17T18:17:43.007Z and has not been modified since then. The NVD entry is currently Undergoing Analysis. Additional verification tasks are recommended to confirm affected scope and severity.

Official resources