NI vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-4130 There is a storage of sensitive information in cleartext vulnerability in NI SystemLink.High 8.4 · Sep 10, 2026
• CVE-2026-4129 There is an improper access control vulnerability in NI SystemLink that may allow an authenticated user with limited privileges to access host operating system High 8.6 · Sep 10, 2026
• CVE-2026-64204 There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.High 8.5 · Aug 25, 2026
• CVE-2026-64203 There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.High 8.5 · Aug 25, 2026
• CVE-2026-64202 There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.High 8.5 · Aug 25, 2026
• CVE-2026-64201 There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.High 8.5 · Aug 25, 2026
• CVE-2026-16234 There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.High 8.5 · Aug 25, 2026
• CVE-2026-16233 There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.High 8.5 · Aug 25, 2026
• CVE-2026-18485 There is a local privilege escalation vulnerability recently discovered in the NI-PAL kernel driver.High 8.5 · Aug 5, 2026
• CVE-2026-9142 There is an insecure default credentials vulnerability in NI grpc-device when TLS configuration is not present and the server is bound beyond loopback.Critical 9.3 · Jun 19, 2026
• CVE-2026-48140 There is an unchecked enum cast vulnerability in NI grpc-device BeginSidebandStream that may allow an attacker to trigger invalid enum states and undefined behaHigh 7.1 · Jun 19, 2026
• CVE-2026-48139 There is a NULL pointer dereference vulnerability in NI grpc-device in the data moniker service that may allow an attacker to cause a denial of service by triggHigh 8.7 · Jun 19, 2026
• CVE-2026-48138 There is an out-of-bounds read vulnerability in the NI grpc-device streaming API due to a missing bounds check that may result in a denial of service.High 8.7 · Jun 19, 2026
• CVE-2026-48137 There is an untrusted pointer dereference vulnerability in the NI grpc-device sideband streaming API that may allow an attacker to cause an arbitrary memory derCritical 9.3 · Jun 19, 2026
• CVE-2026-8036 Improper input validation in NI-PAL may allow a local authenticated user to access arbitrary system memory, potentially leading to privilege escalation.High 8.4 · Jun 2, 2026
• CVE-2026-9051 There is an authentication bypass vulnerability in the NI SystemLink Enterprise Dashboard application that may allow an unauthenticated remote attacker to bypasCritical 9.3 · May 29, 2026
• CVE-2026-32864 There is a memory corruption vulnerability due to an out-of-bounds read in mgcore_SH_25_3!aligned_free() in NI LabVIEW.High 8.5 · Apr 7, 2026
• CVE-2026-32863 There is a memory corruption vulnerability due to an out-of-bounds read in sentry_transaction_context_set_operation() in NI LabVIEW.High 8.5 · Apr 7, 2026
• CVE-2026-32862 There is a memory corruption vulnerability due to an out-of-bounds write in ResFileFactory::InitResourceMgr() in NI LabVIEW.High 8.5 · Apr 7, 2026
• CVE-2026-32861 There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted LVCLASS file in NI LabVIEW.High 8.5 · Apr 7, 2026
• CVE-2026-32860 There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted LVLIB file in NI LabVIEW.High 8.5 · Apr 7, 2026
• CVE-2025-64469 There is a stack-based buffer overflow vulnerability in NI LabVIEW in LVResFile::FindRsrcListEntry() when parsing a corrupted VI file.High 8.5 · Dec 18, 2025
• CVE-2025-64468 There is a use-after-free vulnerability in sentry!sentry_span_set_data() when parsing a corrupted VI file.High 8.5 · Dec 18, 2025
• CVE-2025-64467 There is an out of bounds read vulnerability in NI LabVIEW in LVResFile::FindRsrcListEntry() when parsing a corrupted VI file.High 8.5 · Dec 18, 2025
• CVE-2025-64466 There is an out of bounds read vulnerability in NI LabVIEW in lvre!ExecPostedProcRecPost() when parsing a corrupted VI file.High 8.5 · Dec 18, 2025