CVE Program partner

NI

National Instruments

API
CVEs, 365 days47101 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationNational Instruments
RoleCNA
TypeVendor
Reports tomitre
ScopeNI products only (including National Instruments).
Advisorieshttps://www.ni.com/en-us/support/documentation/supplemental/11/available-critical-and-security-updates-for-ni-software.html

Latest CVEs · RSS

  • CVE-2026-19477 2026-09-17 · CVSS 7.8
    There is stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux (uldaq).  This may result in information disclosure or
  • CVE-2026-4130 2026-09-10 · CVSS 7.1
    There is a storage of sensitive information in cleartext vulnerability in NI SystemLink. This vulnerability may allow an attacker with local access to obtain se
  • CVE-2026-4129 2026-09-10 · CVSS 8.1
    There is an improper access control vulnerability in NI SystemLink that may allow an authenticated user with limited privileges to access host operating system
  • CVE-2026-64200 2026-09-03 · CVSS 8.5
    There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data.   This results in a read a past the end of an allocate
  • CVE-2026-64199 2026-09-03 · CVSS 8.6
    There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data.   This results in a read outside the bounds of an allo
  • CVE-2026-64198 2026-09-03 · CVSS 8.5
    There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data.   This results in a read a few bytes past the end of a
  • CVE-2026-64197 2026-09-03 · CVSS 8.5
    There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated dat
  • CVE-2026-64196 2026-09-03 · CVSS 8.5
    There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated hea
  • CVE-2026-64195 2026-09-03 · CVSS 8.5
    There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Successful exploitation requires an attacker to
  • CVE-2026-64204 2026-08-25 · CVSS 7.8
    There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful
  • CVE-2026-64203 2026-08-25 · CVSS 7.8
    There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful
  • CVE-2026-64202 2026-08-25 · CVSS 7.8
    There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful
  • CVE-2026-64201 2026-08-25 · CVSS 7.8
    There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful
  • CVE-2026-16234 2026-08-25 · CVSS 7.8
    There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful
  • CVE-2026-16233 2026-08-25 · CVSS 7.8
    There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful
  • CVE-2026-18445 2026-08-25 · CVSS 6.6
    There is an integer overflow vulnerability resulting in an out-of-bounds write recently discovered in NI LabVIEW.  This may result in information disclosure or
  • CVE-2026-18444 2026-08-25 · CVSS 6.6
    There is an integer conversion vulnerability resulting in an out-of-bounds read when loading images recently discovered in NI LabVIEW.  This may result in infor
  • CVE-2026-18485 2026-08-05 · CVSS 8.5
    There is a local privilege escalation vulnerability recently discovered in the NI-PAL kernel driver.  This may allow a local, authenticated user to escalate pri
  • CVE-2026-9143 2026-06-19 · CVSS 3.7
    There is an incorrect conversion between numeric types vulnerability in NI grpc-device due to missing range checks in CodeGen.  This may silently discard high b
  • CVE-2026-9142 2026-06-19 · CVSS 9.1
    There is an insecure default credentials vulnerability in NI grpc-device when TLS configuration is not present and the server is bound beyond loopback.  This ma
  • CVE-2026-48141 2026-06-19 · CVSS 5.3
    There is a memory leak in NI grpc-device BeginSidebandStream that may result in denial of service due to memory exhaustion.  This affects NI grpc-device 2.17.0
  • CVE-2026-48140 2026-06-19 · CVSS 6.5
    There is an unchecked enum cast vulnerability in NI grpc-device BeginSidebandStream that may allow an attacker to trigger invalid enum states and undefined beha
  • CVE-2026-48139 2026-06-19 · CVSS 7.5
    There is a NULL pointer dereference vulnerability in NI grpc-device in the data moniker service that may allow an attacker to cause a denial of service by trigg
  • CVE-2026-48138 2026-06-19 · CVSS 7.5
    There is an out-of-bounds read vulnerability in the NI grpc-device streaming API due to a missing bounds check that may result in a denial of service. Successfu
  • CVE-2026-48137 2026-06-19 · CVSS 9.1
    There is an untrusted pointer dereference vulnerability in the NI grpc-device sideband streaming API that may allow an attacker to cause an arbitrary memory der

All CVE Program partners