THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-4374 (CRITICAL 9.1) — Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Recording Service,Routing Service,Queueing Service,Cloud Discovery Service,Observability Collector) allows Serialized Data External Linking, Data Serialization External Entities Blowu

[NVD] CVE-2026-4374 (CRITICAL 9.1) — Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Recording Service,Routing Service,Queueing Service,Cloud Discovery Service,Observability Collector) allows Serialized Data External Linking, Data Serialization External Entities Blowu

lownvdPublished 2026-04-01

CVE-2026-4374 CVSS: 9.1 CRITICAL Published: 2026-04-01T02:16:03.540

Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Recording Service,Routing Service,Queueing Service,Cloud Discovery Service,Observability Collector) allows Serialized Data External Linking, Data Serialization External Entities Blowup. This issue affects Connext Professional: from 7.

Indicators of compromise

CVE-2026-4374cve
7.3.1.1ipv4
6.1.2.34ipv4

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-4374