OpenDDS — Vulnerabilities & Security Advisories 3

OpenDDS is an open-source Data-Centric Publish-Subscribe middleware primarily used for real-time communication in distributed systems, particularly in defense, aerospace, and medical domains. Historically, it has been susceptible to remote code execution vulnerabilities due to insecure deserialization and buffer overflows in message handling, along with cross-site scripting issues in web-based management interfaces. While no major public security incidents have been widely documented, the three recorded CVEs highlight potential risks in network-facing components. Its C++ implementation and lack of built-in encryption in core versions require additional hardening for production environments, making it essential for implementers to apply security patches and implement network segmentation.