CVE-2026-4374 Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (multiple infrastructure services) allows Serialized Data External Linking, Data Serialization External Entities Blowup.

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Cloud Discovery Service",
      "Recording Service",
      "Routing Service",
      "Queueing Service",
      "Observability Collector"
    ],
    "product": "Connext Professional",
    "packageName": "connext_professional",
    "packageURL": "pkg:generic/connext_professional",
    "vendor": "RTI",
    "versions": [
      {
        "lessThan": "7.7.0",
        "status": "affected",
        "version": "7.4.0",
        "versionType": "custom"
      },
      {
        "lessThan": "7.3.1.1",
        "status": "affected",
        "version": "7.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "6.1.2.34",
        "status": "affected",
        "version": "6.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "6.0.*",
        "status": "affected",
        "version": "6.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.3.*",
        "status": "affected",
        "version": "5.3.0",
        "versionType": "custom"
      }
    ]
  }
]