Vulnerability · Published Aug 25, 2026 · Assigned by NI

CVE-2026-18445Integer Overflow Vulnerability Resulting in an Out of Bounds Write in NI LabVIEW

Medium 6.6

In plain English

A medium-severity integer overflow in LabVIEW from NI. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities).

Severity (CVSS 3.1)6.6Medium

Exploit odds (30 days)0.2%top 92.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

There is an integer overflow vulnerability resulting in an out-of-bounds write recently discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI file.  This vulnerability affects NI LabVIEW 2026 Q3 and prior versions.

Affected products (as reported)

Vendor	Product	Versions
NI	LabVIEW	0 – before 23.0.023.1.0 – before 23.3.1024.1.0 – before 24.3.725.1.0 – before 25.3.526.1.0 – before 26.3.1

Weakness: CWE-190 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

References

https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/integer-overflow-vulnerability-resulting-in-an-out-of-bounds-write-in-ni-labview.html