CVE-2026-18626 is a CWE-125 out-of-bounds read vulnerability in RTI Connext Professional Core Libraries. It affects versions >=7.4.0 and <7.7.0.1, >=7.0.0 and <7.3.1.6, and exact versions 6.1.0, 6.0.0, 5.3.0, 5.2.0, and 5.0.0. The flaw allows reading beyond allocated buffer boundaries, which can lead to overread of memory buffers. The CVSS 4.0 vector indicates local attack vector, low attack complexity, no privileges required, no user interaction, and high impact on availability. The vulnerability is published and assigned by RTI but no patch or vendor advisory is included in the data.

The vulnerability can lead to out-of-bounds memory reads, which may cause application crashes or exposure of sensitive memory contents. The CVSS score of 6.8 (medium) reflects a significant impact on availability and potential information disclosure. Exploitation requires local access with low privileges and no user interaction. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Users should monitor RTI advisories for updates and apply patches once available.