Ni
115 CVEs across 43 Ni products. Browse Ni vulnerabilities, severities, and proof-of-concept exploits.
Ni products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-4130 | High | 7.1 | 2026-09-10 | There is a storage of sensitive information in cleartext vulnerability in NI SystemLink. This vulnerability may allow an attacker with local access to obtain s… |
CVE-2026-4129 | High | 8.1 | 2026-09-10 | There is an improper access control vulnerability in NI SystemLink that may allow an authenticated user with limited privileges to access host operating system… |
CVE-2026-64200 | High | 7.8 | 2026-09-03 | There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read a past the end of an allocat… |
CVE-2026-64199 | High | 7.8 | 2026-09-03 | There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read outside the bounds of an all… |
CVE-2026-64198 | High | 7.8 | 2026-09-03 | There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read a few bytes past the end of… |
CVE-2026-64197 | High | 7.8 | 2026-09-03 | There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated da… |
CVE-2026-64196 | High | 7.8 | 2026-09-03 | There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated he… |
CVE-2026-64195 | High | 7.8 | 2026-09-03 | There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Successful exploitation requires an attacker t… |
CVE-2026-64204 | High | 7.8 | 2026-08-25 | There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful… |
CVE-2026-64203 | High | 7.8 | 2026-08-25 | There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful… |
CVE-2026-64202 | High | 7.8 | 2026-08-25 | There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful… |
CVE-2026-64201 | High | 7.8 | 2026-08-25 | There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful… |
CVE-2026-18445 | Medium | 6.6 | 2026-08-25 | There is an integer overflow vulnerability resulting in an out-of-bounds write recently discovered in NI LabVIEW. This may result in information disclosure or… |
CVE-2026-18444 | Medium | 6.6 | 2026-08-25 | There is an integer conversion vulnerability resulting in an out-of-bounds read when loading images recently discovered in NI LabVIEW. This may result in info… |
CVE-2026-16234 | High | 7.8 | 2026-08-25 | There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful… |
CVE-2026-16233 | High | 7.8 | 2026-08-25 | There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful… |
CVE-2026-18485 | High | 7.8 | 2026-08-05 | There is a local privilege escalation vulnerability recently discovered in the NI-PAL kernel driver. This may allow a local, authenticated user to escalate pr… |
CVE-2026-9143 | Low | 3.7 | 2026-06-19 | There is an incorrect conversion between numeric types vulnerability in NI grpc-device due to missing range checks in CodeGen. This may silently discard high… |
CVE-2026-9142 | Critical | 9.1 | 2026-06-19 | There is an insecure default credentials vulnerability in NI grpc-device when TLS configuration is not present and the server is bound beyond loopback. This m… |
CVE-2026-48141 | Medium | 5.3 | 2026-06-19 | There is a memory leak in NI grpc-device BeginSidebandStream that may result in denial of service due to memory exhaustion. This affects NI grpc-device 2.17.0… |
CVE-2026-48140 | Medium | 6.5 | 2026-06-19 | There is an unchecked enum cast vulnerability in NI grpc-device BeginSidebandStream that may allow an attacker to trigger invalid enum states and undefined beh… |
CVE-2026-48139 | High | 7.5 | 2026-06-19 | There is a NULL pointer dereference vulnerability in NI grpc-device in the data moniker service that may allow an attacker to cause a denial of service by trig… |
CVE-2026-48138 | High | 7.5 | 2026-06-19 | There is an out-of-bounds read vulnerability in the NI grpc-device streaming API due to a missing bounds check that may result in a denial of service. Successf… |
CVE-2026-48137 | Critical | 9.1 | 2026-06-19 | There is an untrusted pointer dereference vulnerability in the NI grpc-device sideband streaming API that may allow an attacker to cause an arbitrary memory de… |
CVE-2026-8036 | High | 7.1 | 2026-06-02 | Improper input validation in NI-PAL may allow a local authenticated user to access arbitrary system memory, potentially leading to privilege escalation. This v… |
CVE-2026-8035 | High | 7.1 | 2026-06-02 | Improper input validation in the NI-PAL kernel driver may allow a local authenticated user to cause a denial of service by triggering a crash due to a NULL poi… |
CVE-2026-9051 | Critical | 9.1 | 2026-05-29 | There is an authentication bypass vulnerability in the NI SystemLink Enterprise Dashboard application that may allow an unauthenticated remote attacker to bypa… |
CVE-2026-32864 | High | 7.8 | 2026-04-07 | There is a memory corruption vulnerability due to an out-of-bounds read in mgcore_SH_25_3!aligned_free() in NI LabVIEW. This vulnerability may result in infor… |
CVE-2026-32863 | High | 7.8 | 2026-04-07 | There is a memory corruption vulnerability due to an out-of-bounds read in sentry_transaction_context_set_operation() in NI LabVIEW. This vulnerability may re… |
CVE-2026-32862 | High | 7.8 | 2026-04-07 | There is a memory corruption vulnerability due to an out-of-bounds write in ResFileFactory::InitResourceMgr() in NI LabVIEW. This vulnerability may result in… |
CVE-2026-32861 | High | 7.8 | 2026-04-07 | There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted LVCLASS file in NI LabVIEW. This vulnerability may result in… |
CVE-2026-32860 | High | 7.8 | 2026-04-07 | There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted LVLIB file in NI LabVIEW. This vulnerability may result in i… |
CVE-2026-0957 | High | 7.8 | 2026-03-13 | There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted file in Digilent DASYLab. This vulnerability may result in i… |
CVE-2026-0956 | High | 7.8 | 2026-03-13 | There is a memory corruption vulnerability due to an out-of-bounds read when loading a corrupted file in Digilent DASYLab. This vulnerability may result in in… |
CVE-2026-0955 | High | 7.8 | 2026-03-13 | There is a memory corruption vulnerability due to an out-of-bounds read when loading a corrupted file in Digilent DASYLab. This vulnerability may result in in… |
CVE-2026-0954 | High | 7.8 | 2026-03-13 | There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted DSB file in Digilent DASYLab. This vulnerability may result… |
CVE-2025-64469 | High | 7.8 | 2025-12-18 | There is a stack-based buffer overflow vulnerability in NI LabVIEW in LVResFile::FindRsrcListEntry() when parsing a corrupted VI file. This vulnerability may… |
CVE-2025-64468 | High | 7.8 | 2025-12-18 | There is a use-after-free vulnerability in sentry!sentry_span_set_data() when parsing a corrupted VI file. This vulnerability may result in information disclo… |
CVE-2025-64467 | High | 7.8 | 2025-12-18 | There is an out of bounds read vulnerability in NI LabVIEW in LVResFile::FindRsrcListEntry() when parsing a corrupted VI file. This vulnerability may result i… |
CVE-2025-64466 | High | 7.8 | 2025-12-18 | There is an out of bounds read vulnerability in NI LabVIEW in lvre!ExecPostedProcRecPost() when parsing a corrupted VI file. This vulnerability may result in… |
CVE-2025-64465 | High | 7.8 | 2025-12-18 | There is an out of bounds read vulnerability in NI LabVIEW in lvre!DataSizeTDR() when parsing a corrupted VI file. This vulnerability may result in informatio… |
CVE-2025-64464 | High | 7.8 | 2025-12-18 | There is an out of bounds read vulnerability in NI LabVIEW in lvre!VisaWriteFromFile() when parsing a corrupted VI file. This vulnerability may result in info… |
CVE-2025-64463 | High | 7.8 | 2025-12-18 | There is an out of bounds read vulnerability in NI LabVIEW in LVResource::DetachResource() when parsing a corrupted VI file. This vulnerability may result in… |
CVE-2025-64462 | High | 7.8 | 2025-12-18 | There is an out of bounds read vulnerability in NI LabVIEW in LVResFile::RGetMemFileHandle() when parsing a corrupted VI file. This vulnerability may result i… |
CVE-2025-64461 | High | 7.8 | 2025-12-18 | There is an out of bounds write vulnerability in NI LabVIEW in mgocre_SH_25_3!RevBL() when parsing a corrupted VI file. This vulnerability may result in infor… |
CVE-2025-12097 | High | 7.5 | 2025-12-04 | There is a relative path traversal vulnerability in the NI System Web Server that may result in information disclosure. Successful exploitation requires an at… |
CVE-2025-6034 | High | 7.8 | 2025-09-30 | There is a memory corruption vulnerability due to an out of bounds read in DefaultFontOptions() when using SymbolEditor in NI Circuit Design Suite. This vulne… |
CVE-2025-6033 | High | 7.8 | 2025-09-30 | There is a memory corruption vulnerability due to an out of bounds write in XML_Serialize() when using SymbolEditor in NI Circuit Design Suite. This vulnerabi… |
CVE-2025-9189 | High | 7.8 | 2025-09-02 | There is an out of bounds write vulnerability due to improper bounds checking resulting in a large destination address when parsing a DSB file with Digilent DA… |
CVE-2025-9188 | High | 7.8 | 2025-09-02 | There is a deserialization of untrusted data vulnerability in Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploit… |
CVE-2025-57778 | High | 7.8 | 2025-09-02 | There is an out of bounds write vulnerability due to improper bounds checking resulting in an invalid source address when parsing a DSB file with Digilent DASY… |
CVE-2025-57777 | High | 7.8 | 2025-09-02 | There is an out of bounds write vulnerability due to improper bounds checking in displ2.dll when parsing a DSB file with Digilent DASYLab. This vulnerability… |
CVE-2025-57776 | High | 7.8 | 2025-09-02 | There is an out of bounds write vulnerability due to improper bounds checking resulting in an invalid address when parsing a DSB file with Digilent DASYLab. T… |
CVE-2025-57775 | High | 7.8 | 2025-09-02 | There is a heap-based Buffer Overflow vulnerability due to improper bounds checking when parsing a DSB file with Digilent DASYLab. This vulnerability may resu… |
CVE-2025-57774 | High | 7.8 | 2025-09-02 | There is an out of bounds write vulnerability due to improper bounds checking resulting in invalid data when parsing a DSB file with Digilent DASYLab. This vu… |
CVE-2025-7849 | High | 7.8 | 2025-07-29 | A memory corruption vulnerability due to improper error handling when a VILinkObj is null exists in NI LabVIEW that may result in arbitrary code execution. Su… |
CVE-2025-7848 | High | 7.8 | 2025-07-29 | A memory corruption vulnerability due to improper input validation in lvpict.cpp exists in NI LabVIEW that may result in arbitrary code execution. Successful… |
CVE-2025-7361 | High | 7.8 | 2025-07-29 | A code injection vulnerability due to an improper initialization check exists in NI LabVIEW that may result in arbitrary code execution. Successful exploitati… |
CVE-2025-2634 | High | 7.8 | 2025-07-23 | Out of bounds read vulnerability due to improper bounds checking in NI LabVIEW in fontmgr may result in information disclosure or arbitrary code execution. Su… |
CVE-2025-2633 | High | 7.8 | 2025-07-23 | Out of bounds read vulnerability due to improper bounds checking in NI LabVIEW in lvre!UDecStrToNum that may result in information disclosure or arbitrary code… |
CVE-2025-30421 | High | 7.8 | 2025-05-15 | There is a memory corruption vulnerability due to a stack-based buffer overflow in DrObjectStorage::XML_Serialize() when using the SymbolEditor in NI Circuit D… |
CVE-2025-30420 | High | 7.8 | 2025-05-15 | There is a memory corruption vulnerability due to an out of bounds read in Bitmap::InternalDraw() when using the SymbolEditor in NI Circuit Design Suite. This… |
CVE-2025-30419 | High | 7.8 | 2025-05-15 | There is a memory corruption vulnerability due to an out of bounds read in GetSymbolBorderRectSize() when using the SymbolEditor in NI Circuit Design Suite. T… |
CVE-2025-30418 | High | 7.8 | 2025-05-15 | There is a memory corruption vulnerability due to an out of bounds write in CheckPins() when using the SymbolEditor in NI Circuit Design Suite. This vulnerabi… |
CVE-2025-30417 | High | 7.8 | 2025-05-15 | There is a memory corruption vulnerability due to an out of bounds write in Library!DecodeBase64() when using the SymbolEditor in NI Circuit Design Suite. Thi… |
CVE-2025-2632 | High | 7.8 | 2025-04-09 | Out of bounds write vulnerability due to improper bounds checking in NI LabVIEW reading CPU info from cache that may result in information disclosure or arbitr… |
CVE-2025-2631 | High | 7.8 | 2025-04-09 | Out of bounds write vulnerability due to improper bounds checking in NI LabVIEW in InitCPUInformation() that may result in information disclosure or arbitrary… |
CVE-2025-2630 | High | 7.3 | 2025-04-09 | There is a DLL hijacking vulnerability due to an uncontrolled search path that exists in NI LabVIEW. This vulnerability may result in arbitrary code execution… |
CVE-2025-2629 | High | 7.3 | 2025-04-09 | There is a DLL hijacking vulnerability due to an uncontrolled search path that exists in NI LabVIEW when loading NI Error Reporting. This vulnerability may re… |
CVE-2025-2450 | High | 8.8 | 2025-03-18 | NI Vision Builder AI VBAI File Processing Missing Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary… |
CVE-2025-2449 | High | 8.8 | 2025-03-18 | NI FlexLogger usiReg URI File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to create arbitrary f… |
CVE-2024-12742 | High | 7.8 | 2025-03-06 | A deserialization of untrusted data vulnerability exists in NI G Web Development Software that may result in arbitrary code execution. Successful exploitation… |
CVE-2024-12740 | High | 7.8 | 2025-01-27 | Vision related software from NI used a third-party library for image processing that exposes several vulnerabilities. These vulnerabilities may result in arbi… |
CVE-2024-12741 | High | 7.8 | 2024-12-18 | A deserialization of untrusted data vulnerability exists in NI DAQExpress that may result in remote code execution. Successful exploitation requires an attacke… |
CVE-2024-10496 | High | 7.8 | 2024-12-10 | An out of bounds read due to improper input validation in BuildFontMap in fontmgr.cpp in NI LabVIEW may disclose information or result in arbitrary code execut… |
CVE-2024-10495 | High | 7.8 | 2024-12-10 | An out of bounds read due to improper input validation when loading the font table in fontmgr.cpp in NI LabVIEW may disclose information or result in arbitrary… |
CVE-2024-10494 | High | 7.8 | 2024-12-10 | An out of bounds read due to improper input validation in HeapObjMapImpl.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Suc… |
CVE-2024-5602 | High | 7.8 | 2024-07-23 | A stack-based buffer overflow vulnerability due to a missing bounds check in the NI I/O Trace Tool may result in arbitrary code execution. Successful exploita… |
CVE-2024-4081 | High | 7.8 | 2024-07-23 | A memory corruption issue due to an improper length check in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation… |
CVE-2024-4080 | High | 7.8 | 2024-07-23 | A memory corruption issue due to an improper length check in LabVIEW tdcore.dll may disclose information or result in arbitrary code execution. Successful exp… |
CVE-2024-4079 | High | 7.8 | 2024-07-23 | An out of bounds read due to a missing bounds check in LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation require… |
CVE-2024-6806 | Critical | 9.8 | 2024-07-22 | The NI VeriStand Gateway is missing authorization checks when an actor attempts to access Project resources. These missing checks may result in remote code ex… |
CVE-2024-6805 | High | 7.5 | 2024-07-22 | The NI VeriStand Gateway is missing authorization checks when an actor attempts to access File Transfer resources. These missing checks may result in informat… |
CVE-2024-6794 | Critical | 9.8 | 2024-07-22 | A deserialization of untrusted data vulnerability exists in NI VeriStand Waveform Streaming Server that may result in remote code execution. Successful exploi… |
CVE-2024-6793 | Critical | 9.8 | 2024-07-22 | A deserialization of untrusted data vulnerability exists in NI VeriStand DataLogging Server that may result in remote code execution. Successful exploitation… |
CVE-2024-6791 | High | 7.8 | 2024-07-22 | A directory path traversal vulnerability exists when loading a vsmodel file in NI VeriStand that may result in remote code execution. Successful exploitation… |
CVE-2024-6675 | High | 7.8 | 2024-07-22 | A deserialization of untrusted data vulnerability exists in NI VeriStand that may result in remote code execution. Successful exploitation requires an attacke… |
CVE-2024-6638 | Medium | 5.5 | 2024-07-22 | An integer overflow vulnerability due to improper input validation when reading TDMS files in LabVIEW may result in an infinite loop. Successful exploitation… |
CVE-2024-6122 | Medium | 5.5 | 2024-07-22 | An incorrect permission in the installation directory for the shared NI SystemLink Server KeyValueDatabase service may result in information disclosure via loc… |
CVE-2024-6121 | High | 7.8 | 2024-07-22 | An out-of-date version of Redis shipped with NI SystemLink Server is susceptible to multiple vulnerabilities, including CVE-2022-24834. This affects NI System… |
CVE-2024-4044 | High | 7.8 | 2024-05-14 | A deserialization of untrusted data vulnerability exists in common code used by FlexLogger and InstrumentStudio that may result in remote code execution. Succ… |
CVE-2024-23612 | High | 7.8 | 2024-03-11 | An improper error handling vulnerability in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a… |
CVE-2024-23611 | High | 7.8 | 2024-03-11 | An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a… |
CVE-2024-23610 | High | 7.8 | 2024-03-11 | An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a… |
CVE-2024-23609 | High | 7.8 | 2024-03-11 | An improper error handling vulnerability in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a… |
CVE-2024-23608 | High | 7.8 | 2024-03-11 | An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a… |
CVE-2024-1156 | High | 7.8 | 2024-02-20 | Incorrect directory permissions for the shared NI RabbitMQ service may allow a local authenticated user to read RabbitMQ configuration information and potentia… |
CVE-2024-1155 | High | 7.8 | 2024-02-20 | Incorrect permissions in the installation directories for shared SystemLink Elixir based services may allow an authenticated user to potentially enable escalat… |
CVE-2023-5136 | Medium | 5.5 | 2023-11-08 | An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure. An attacker could exploit this vulnerability b… |
CVE-2023-4601 | High | 8.1 | 2023-10-18 | A stack-based buffer overflow vulnerability exists in NI System Configuration that could result in information disclosure and/or arbitrary code execution. Succ… |