NI
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| LabVIEW | 44 | – | Aug 25, 2026 |
| InstrumentStudio | 8 | – | Jun 19, 2026 |
| VeriStand | 7 | – | Jul 22, 2024 |
| Circuit Design Suite | 7 | – | Sep 30, 2025 |
| grpc-device | 7 | – | Jun 19, 2026 |
| FlexLogger | 7 | – | Mar 18, 2025 |
| SystemLink Server | 6 | – | Sep 10, 2026 |
| NI-PAL | 3 | – | Aug 5, 2026 |
| SystemLink | 2 | – | Sep 10, 2026 |
| NI-IMAQdx | 1 | – | Jan 27, 2025 |
| System Configuration | 1 | – | Oct 18, 2023 |
| SystemLink Enterprise | 1 | – | May 29, 2026 |
| TopoGrafix DataPlugin for GPX | 1 | – | Nov 8, 2023 |
| Vision Acquisition Software | 1 | – | Jan 27, 2025 |
| Vision Builder AI | 1 | – | Mar 18, 2025 |
| Vision Builder for Automated Inspection | 1 | – | Jan 27, 2025 |
| Vision Development Module | 1 | – | Jan 27, 2025 |
| DAQExpress | 1 | – | Dec 18, 2024 |
| Data Record AD | 1 | – | Jan 27, 2025 |
| DIAdem | 1 | – | Nov 8, 2023 |
| FlexRIO | 1 | – | Jan 27, 2025 |
| FRC Game Tools | 1 | – | Jan 27, 2025 |
| G Web Development Software | 1 | – | Mar 6, 2025 |
| IO Trace Tool | 1 | – | Jul 23, 2024 |
| MeasurementLink | 1 | – | Oct 5, 2023 |
Exploited and recent CVEs
- CVE-2026-4130 Storage of Sensitive Information in Cleartext in NI SystemLink 0.1%
- CVE-2026-4130 Storage of Sensitive Information in Cleartext in NI SystemLink 0.1%
- CVE-2026-4129 Improper Access Controls in NI SystemLink 0.4%
- CVE-2026-4129 Improper Access Controls in NI SystemLink 0.4%
- CVE-2026-64204 Out-of-Bounds Write Vulnerability in NI LabVIEW when loading VI 0.2%
- CVE-2026-64203 Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI 0.2%
- CVE-2026-64202 Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI 0.2%
- CVE-2026-64201 Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI 0.2%
- CVE-2026-16234 Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI 0.2%
- CVE-2026-16233 Out-of-Bounds Write Vulnerability in NI LabVIEW when loading VI 0.2%
- CVE-2026-18445 Integer Overflow Vulnerability Resulting in an Out of Bounds Write in NI LabVIEW 0.2%
- CVE-2026-18444 Integer Conversion Vulnerability Resulting in an Out of Bounds Read in NI LabVIEW 0.2%
- CVE-2026-18485 Local Privilege Escalation in NI-PAL 0.2%
- CVE-2026-9143 Incorrect Conversion between Numeric Types in NI grpc-device due to missing range checks in CodeGen 0.3%
- CVE-2026-9143 Incorrect Conversion between Numeric Types in NI grpc-device due to missing range checks in CodeGen 0.3%
- CVE-2026-9142 Insecure Default Credentials vulnerability in NI grpc-device when TLS configuration is not present 0.4%
- CVE-2026-9142 Insecure Default Credentials vulnerability in NI grpc-device when TLS configuration is not present 0.4%
- CVE-2026-48141 Memory leak in NI grpc-device BeginSidebandStream 0.4%
- CVE-2026-48141 Memory leak in NI grpc-device BeginSidebandStream 0.4%
- CVE-2026-48140 Unchecked enum cast vulnerability in NI grpc-device in BeginSidebandStream 0.4%
- CVE-2026-48140 Unchecked enum cast vulnerability in NI grpc-device in BeginSidebandStream 0.4%
- CVE-2026-48139 NULL pointer dereference vulnerability in NI grpc-device data moniker service 0.5%
- CVE-2026-48139 NULL pointer dereference vulnerability in NI grpc-device data moniker service 0.5%
- CVE-2026-48138 Out-of-bounds read vulnerability in the NI grpc-device streaming API 0.5%
- CVE-2026-48138 Out-of-bounds read vulnerability in the NI grpc-device streaming API 0.5%
- CVE-2026-48137 Untrusted pointer dereference in NI grpc-device sideband streaming API 0.8%
- CVE-2026-48137 Untrusted pointer dereference in NI grpc-device sideband streaming API 0.8%
- CVE-2026-8036 Local privilege escalation in NI-PAL 0.1%
- CVE-2026-8035 NULL pointer dereference in NI-PAL <0.1%
- CVE-2026-9051 Authentication Bypass Vulnerability in NI SystemLink Enterprise 0.6%