Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 111

Export CSV
CVE-2026-18445

Integer Overflow Vulnerability Resulting in an Out of Bounds Write in NI LabVIEW

There is an integer overflow vulnerability resulting in an out-of-bounds write recently discovered in NI LabVIEW.  This may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI file.  This vulnerability affects NI LabVIEW 2026 Q3 and prior versions.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Ni
Products
Labview
CVE-2026-16234

Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI.  This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Ni
Products
Labview
CVE-2025-9189

Out Of Bounds Write when parsing a DSB file with Digilent DASYLab

There is an out of bounds write vulnerability due to improper bounds checking resulting in a large destination address when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted DSB file. The vulnerability affects all versions of DASYLab.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Digilent Measx Ni
Products
Dasylab Dasylab Dasylab
CVE-2026-64204

Out-of-Bounds Write Vulnerability in NI LabVIEW when loading VI

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI.  This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Ni
Products
Labview
CVE-2026-64201

Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI.  This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Ni
Products
Labview
CVE-2026-64202

Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI.  This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Ni
Products
Labview
CVE-2026-64203

Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI.  This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Ni
Products
Labview
CVE-2026-18485

Local Privilege Escalation in NI-PAL

There is a local privilege escalation vulnerability recently discovered in the NI-PAL kernel driver.  This may allow a local, authenticated user to escalate privileges and execute arbitrary code.  This vulnerability affects NI-PAL 26.3.1 and prior versions running on Microsoft Windows.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Ni
Products
Ni-pal
CVE-2026-9143

Incorrect Conversion between Numeric Types in NI grpc-device due to missing range checks in CodeGen

There is an incorrect conversion between numeric types vulnerability in NI grpc-device due to missing range checks in CodeGen.  This may silently discard high bits if a size value exceeded the target type's range. This affects NI grpc-device 2.17.0 and prior versions.

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Ni
Products
Grpc-device Instrumentstudio Ni Grpc Device Server
CVE-2026-9142

Insecure Default Credentials vulnerability in NI grpc-device when TLS configuration is not present

There is an insecure default credentials vulnerability in NI grpc-device when TLS configuration is not present and the server is bound beyond loopback.  This may allow an unauthenticated user access to the server on the local network.  This affects NI grpc-device 2.17.0 and prior versions.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Ni
Products
Grpc-device Instrumentstudio Ni Grpc Device Server
CVE-2026-48141

Memory leak in NI grpc-device BeginSidebandStream

There is a memory leak in NI grpc-device BeginSidebandStream that may result in denial of service due to memory exhaustion.  This affects NI grpc-device 2.17.0 and prior versions.

CVSS 4.0 · 6 Medium EPSS < 1% KEV · Not listed
Vendors
Ni
Products
Grpc-device Instrumentstudio Ni Grpc Device Server
CVE-2026-48139

NULL pointer dereference vulnerability in NI grpc-device data moniker service

There is a NULL pointer dereference vulnerability in NI grpc-device in the data moniker service that may allow an attacker to cause a denial of service by triggering a crash.  Successful exploitation requires an attacker to provide an unknown value to the data moniker service. This affects NI grpc-device 2.17.0 and prior versions.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Ni
Products
Grpc-device Instrumentstudio Ni Grpc Device Server
CVE-2026-48140

Unchecked enum cast vulnerability in NI grpc-device in BeginSidebandStream

There is an unchecked enum cast vulnerability in NI grpc-device BeginSidebandStream that may allow an attacker to trigger invalid enum states and undefined behavior, potentially resulting in a denial of service. Successful exploitation requires an attacker to supply a specially crafted message containing an out-of-range value. This affects NI grpc-device 2.17.0 and prior versions.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Ni
Products
Grpc-device Instrumentstudio Ni Grpc Device Server
CVE-2026-48137

Untrusted pointer dereference in NI grpc-device sideband streaming API

There is an untrusted pointer dereference vulnerability in the NI grpc-device sideband streaming API that may allow an attacker to cause an arbitrary memory dereference, potentially resulting in remote code execution.  Successful exploitation requires an attacker  to supply a specially crafted Moniker protobuf message.  This affects NI grpc-device 2.17.0 and prior versions.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Ni
Products
Grpc-device Instrumentstudio Ni Grpc Device Server
CVE-2026-48138

Out-of-bounds read vulnerability in the NI grpc-device streaming API

There is an out-of-bounds read vulnerability in the NI grpc-device streaming API due to a missing bounds check that may result in a denial of service. Successful exploitation requires an attacker to supply a specially crafted write request. This affects NI grpc-device 2.17.0 and prior versions.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Ni
Products
Grpc-device Instrumentstudio Ni Grpc Device Server
CVE-2026-8035

NULL pointer dereference in NI-PAL

Improper input validation in the NI-PAL kernel driver may allow a local authenticated user to cause a denial of service by triggering a crash due to a NULL pointer dereference. This vulnerability affects NI-PAL 26.3.0 and prior versions on Windows and Linux.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Microsoft Ni
Products
Linux Kernel Windows Linux Real-time and 1 more
CVE-2026-8036

Local privilege escalation in NI-PAL

Improper input validation in NI-PAL may allow a local authenticated user to access arbitrary system memory, potentially leading to privilege escalation. This vulnerability affects NI-PAL 26.3.0 and prior versions on Windows and Linux.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Linux Microsoft Ni
Products
Linux Kernel Windows Linux Real-time and 1 more
CVE-2026-9051

Authentication Bypass Vulnerability in NI SystemLink Enterprise

There is an authentication bypass vulnerability in the NI SystemLink Enterprise Dashboard application that may allow an unauthenticated remote attacker to bypass authentication controls leading to privilege escalation or information disclosure.  Successful exploitation requires an attacker to send a specially crafted HTTP request.  This vulnerability affects NI SystemLink Enterprise 2026-04 and prior versions.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Ni
Products
Systemlink Enterprise
CVE-2024-5602

Stack-based Buffer Overflow Vulnerability in NI I/O Trace Tool

A stack-based buffer overflow vulnerability due to a missing bounds check in the NI I/O Trace Tool may result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted nitrace file. The NI I/O Trace tool is installed as part of the NI System Configuration utilities included with many NI software products.  Refer to the NI Security Advisory for identifying the version of NI IO Trace.exe installed. The NI I/O Trace tool was also previously released as NI Spy.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Ni
Products
System Configuration
CVE-2024-4044

Deserialization of Untrusted Data Vulnerability in FlexLogger and InstrumentStudio

A deserialization of untrusted data vulnerability exists in common code used by FlexLogger and InstrumentStudio that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted project file. This vulnerability affects NI FlexLogger 2024 Q1 and prior versions as well as NI InstrumentStudio 2024 Q1 and prior versions.

CVSS 3.1 · 7.8 High EPSS 14.7% KEV · Not listed
Vendors
Ni
Products
Flexlogger