CVE-2024-6806

Missing Authorization Checks In NI VeriStand Gateway For Project Resources

The NI VeriStand Gateway is missing authorization checks when an actor attempts to access Project resources. These missing checks may result in remote code execution. This affects NI VeriStand 2024 Q2 and prior versions.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed

Vendors

Ni

Products

Veristand

CVE-2024-6805

Missing Authorization Checks in NI VeriStand Gateway for File Transfer Resources

The NI VeriStand Gateway is missing authorization checks when an actor attempts to access File Transfer resources. These missing checks may result in information disclosure or remote code execution. This affects NI VeriStand 2024 Q2 and prior versions.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Ni

Products

Veristand

CVE-2024-6794

Deserialization of Untrusted Data in NI VeriStand Waveform Streaming Server

A deserialization of untrusted data vulnerability exists in NI VeriStand Waveform Streaming Server that may result in remote code execution. Successful exploitation requires an attacker to send a specially crafted message. These vulnerabilities affect NI VeriStand 2024 Q2 and prior versions.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed

Vendors

Ni

Products

Veristand

CVE-2024-6793

Deserialization of Untrusted Data in NI VeriStand DataLogging Server

A deserialization of untrusted data vulnerability exists in NI VeriStand DataLogging Server that may result in remote code execution. Successful exploitation requires an attacker to send a specially crafted message. These vulnerabilities affect NI VeriStand 2024 Q2 and prior versions.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed

Vendors

Ni

Products

Veristand

CVE-2024-6791

Directory Path Traversal Vulnerability in NI VeriStand with vsmodel Files

A directory path traversal vulnerability exists when loading a vsmodel file in NI VeriStand that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .vsmodel file. This vulnerability affects VeriStand 2024 Q2 and prior versions.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Ni

Products

Veristand

CVE-2024-6675

Deserialization of Untrusted Data Vulnerability in NI VeriStand Project File

A deserialization of untrusted data vulnerability exists in NI VeriStand that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted project file. This vulnerability affects VeriStand 2024 Q2 and prior versions.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Ni

Products

Veristand

CVE-2024-6638

Integer Overflow Vulnerability Reading TDMS Files in LabVIEW

An integer overflow vulnerability due to improper input validation when reading TDMS files in LabVIEW may result in an infinite loop. Successful exploitation requires an attacker to provide a user with a specially crafted TDMS file. This vulnerability affects LabVIEW 2024 Q1 and prior versions.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Ni

Products

Labview

CVE-2024-6122

Incorrect Default Directory Permissions for NI SystemLink Redis Service

An incorrect permission in the installation directory for the shared NI SystemLink Server KeyValueDatabase service may result in information disclosure via local access. This affects NI SystemLink Server 2024 Q1 and prior versions. It also affects NI FlexLogger 2023 Q2 and prior versions which installed this shared service.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Ni

Products

Flexlogger Systemlink

CVE-2024-6121

NI SystemLink Server Ships Out of Date Redis Version

An out-of-date version of Redis shipped with NI SystemLink Server is susceptible to multiple vulnerabilities, including CVE-2022-24834. This affects NI SystemLink Server 2024 Q1 and prior versions. It also affects NI FlexLogger 2023 Q2 and prior versions which installed this shared service.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Ni

Products

Flexlogger Systemlink

CVE-2026-64200

Out Of Bounds Read during string conversion when parsing a .DSB file in DASYLab

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data.   This results in a read a past the end of an allocated heap buffer during string conversion.  Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file.  This issue affects all versions before 2026.0.0.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Measx Ni

Products

Dasylab Dasylab

CVE-2023-4570

Improper Restriction in NI MeasurementLink Python Services

An improper access restriction in NI MeasurementLink Python services could allow an attacker on an adjacent network to reach services exposed on localhost. These services were previously thought to be unreachable outside of the node. This affects measurement plug-ins written in Python using version 1.1.0 and all previous versions of the ni-measurementlink-service Python package.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Ni

Products

Measurementlink

CVE-2026-18444

Integer Conversion Vulnerability Resulting in an Out of Bounds Read in NI LabVIEW

There is an integer conversion vulnerability resulting in an out-of-bounds read when loading images recently discovered in NI LabVIEW.  This may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI file.  This vulnerability affects NI LabVIEW 2026 Q3 and prior versions.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Ni

Products

Labview

CVE-2026-64195

Out Of Bounds Write parsing a .DSB file in DASYLab due to lack of proper validation of user-supplied data

There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file.  This issue affects all versions before 2026.0.0.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Measx Ni

Products

Dasylab Dasylab

CVE-2026-64196

Out Of Bounds Write when parsing a .DSB file in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated heap

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated heap. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file.  This issue affects all versions before 2026.0.0.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Measx Ni

Products

Dasylab Dasylab

CVE-2026-64197

Out Of Bounds Write when parsing a .DSB file in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file.  This issue affects all versions before 2026.0.0.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Measx Ni

Products

Dasylab Dasylab

CVE-2026-64198

Out Of Bounds Read in file handling when parsing a .DSB file in DASYLab

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data.   This results in a read a few bytes past the end of an allocated heap buffer during file handling.  Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file.  This issue affects all versions before 2026.0.0.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Measx Ni

Products

Dasylab Dasylab

CVE-2026-64199

Out Of Bounds Read outside the bounds of an allocated data structure when parsing a .DSB file in DASYLab

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data.   This results in a read outside the bounds of an allocated data structure.  Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file.  This issue affects all versions before 2026.0.0.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed

Vendors

Measx Ni

Products

Dasylab Dasylab

CVE-2026-4130

Storage of Sensitive Information in Cleartext in NI SystemLink

There is a storage of sensitive information in cleartext vulnerability in NI SystemLink. This vulnerability may allow an attacker with local access to obtain sensitive information stored by the system in the clear.  This vulnerability affects NI SystemLink and NI SystemLink Server versions prior to 2026 Q3.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Ni

Products

Systemlink Systemlink Server

CVE-2026-4129

Improper Access Controls in NI SystemLink

There is an improper access control vulnerability in NI SystemLink that may allow an authenticated user with limited privileges to access host operating system files and directories that should be restricted. This vulnerability affects NI SystemLink and NI SystemLink Server versions prior to 2026 Q3.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed

Vendors

Ni

Products

Systemlink Systemlink Server

CVE-2026-16233

Out-of-Bounds Write Vulnerability in NI LabVIEW when loading VI

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI.  This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Ni

Products

Labview