CVE-2025-14543 is classified as CWE-611 (Improper Restriction of XML External Entity Reference) affecting RTI Connext Professional Core Libraries. The vulnerability permits serialized data external linking due to insufficient restriction of XML external entities. Affected versions span multiple major releases from 4.3x up to versions before 7.7.0. The CVSS v4.0 base score is 8.8, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality and availability. The vendor has not published a remediation level or patch information, and no known exploits have been reported.

Successful exploitation could allow an attacker to cause the software to process external XML entities, potentially leading to unauthorized disclosure of information or disruption of service. The high CVSS score reflects significant confidentiality and availability impacts. However, no known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider mitigating exposure by restricting XML external entity processing if configurable, or applying other XML parsing hardening measures specific to their deployment. Monitor RTI's official channels for updates on patches or official mitigations.