CVE-2025-4993: connext professional from 4.4a (inclusive), before 6.1.2.27 (exclusive), from 7.0.0 (inclusive), before 7.3.0.10…

Affected technology

connext professional · from 4.4a (inclusive), before 6.1.2.27 (exclusive)
rti

connext professional · from 7.0.0 (inclusive), before 7.3.0.10 (exclusive)
rti

connext professional · from 7.4.0 (inclusive), before 7.6.0 (exclusive)
rti

Connext Professional · 7.4.0 to before 7.6.0, 7.0.0 to before 7.3.0.10, 6.1.0 to before 6.1.2.27, 6.0.0 to before 6.0.1.43, 5.3.0 to before 5.3.*, 5.2.0 to before 5.2.*, 4.4a to before 5.1.*
RTI

Component: Core Libraries

Attack conditions (Source advisory, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 4.0 assessment (base score 8.3/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.