Skip to content
OpenAdvisories
Medium · 6.9 CVE-2025-14543 EUVD-2025-209595GHSA-3grg-c26q-4w39

Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Core Libraries) allows Serialized Data External Linking.

Published Apr 30, 2026 · Updated Sep 22, 2026 · Assigned by RTI

Description

Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Core Libraries) allows Serialized Data External Linking. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.1, from 6.1.0 before 6.1.*, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*, from 5.2.0 before 5.2.*, from 4.3x before 5.1.*.

Affected products

VendorProductAffectedFixed
RTI Connext Professional 7.4.0 – < 7.7.0, 7.0.0 – < 7.3.1.1, 6.1.0 – < 6.1.*, 6.0.0 – < 6.0.*, 5.3.0 – < 5.3.*, 5.2.0 – < 5.2.*, 4.3x – < 5.1.* 7.7.0

References