# CVE-2026-7866

Stack-based buffer overflow in RTI Connext Professional allowing code execution/crash.

- Page: https://www.vulneraibility.com/cve/CVE-2026-7866
- CVSS: 10.0
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.31% (percentile 24.1)
- CISA SSVC: exploitation none, automatable yes, technical impact total (assessed 2026-09-22)
- Weakness: CWE-121
- Published: 2026-09-22

## Affected versions

- RTI Connext Professional: affected >= 7.4.0 and < 7.7.0.1; >= 7.0.0 and < 7.3.1.6; >= 6.1.0 and < 6.1.*; >= 6.0.0 and < 6.0.*; >= 5.3.0 and < 5.3.*; >= 5.2.0 and < 5.2.*; >= 4.3x and < 5.1.*

A version outside these ranges is not a statement that it is unaffected.

## Impact

Stack-based overflow can lead to remote code execution, arbitrary control or denial of service in systems using Connext core libraries.

## Action

Immediate action required

## Recommendation

Apply vendor fixes immediately; isolate and monitor Connext hosts.

## References

- [other] https://www.rti.com/vulnerabilities/#cve-2026-7866

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.