CVE-2025-14543 is an XML External Entity (XXE) vulnerability (CWE-611) in RTI Connext Professional Core Libraries. It affects versions from 4.3x up to but not including 7.7.0, allowing serialized data external linking due to improper restriction of XML external entity references. The vulnerability can be exploited remotely without authentication or user interaction, resulting in high confidentiality and availability impacts. The CVSS 4.0 vector indicates network attack complexity is low and no privileges are required. No official remediation or patch information is currently available from the vendor. This vulnerability requires attention due to its high severity and broad version impact.

The vulnerability allows an attacker to exploit improper XML external entity processing to link external serialized data, potentially leading to unauthorized disclosure of information and disruption of service. The CVSS score of 8.8 reflects high impact on confidentiality and availability with no required privileges or user interaction. There are no known exploits in the wild currently, but the vulnerability affects multiple widely used versions of Connext Professional.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor RTI's advisories closely. Until a patch is available, consider restricting XML input sources or disabling external entity processing if configurable in the affected product versions.