This vulnerability (CVE-2026-2675) in RTI Connext Professional involves missing authentication for a critical function within its Security Plugins, enabling an attacker to spoof the source of data. Affected versions include exact versions 5.3.0, 6.0.0, 6.1.0, 7.0.0, and 7.4.0, as well as version ranges prior to 5.3.1, 6.0.1, 6.1.1, 7.3.1.3, and 7.7.0. The CVSS vector indicates network attack vector, low attack complexity, partial attack complexity, low privileges required, no user interaction, and high impact on integrity. The vendor has not published an official fix or remediation level, and no exploits are currently known in the wild.

The vulnerability allows an attacker to fake the source of data by exploiting missing authentication for a critical function. This can compromise data integrity within affected RTI Connext Professional deployments. The medium CVSS score reflects a moderate risk due to the potential for data spoofing without requiring user interaction and with low privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level has been published by RTI, users should monitor vendor communications for updates. Until a patch is available, consider restricting network access to trusted sources and applying any available configuration workarounds that limit exposure to untrusted data sources.