Vendor

    NI

    115 known vulnerabilities in products by NI, 0 of them actively exploited (CISA KEV).

    Key figures

    115

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    8

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in NI
    HighCVE-2025-2449

    NI FlexLogger usiReg URI File Parsing Directory Traversal Remote Code Execution Vulnerability

    7.8
    HighCVE-2025-7848

    Missing input check in lvpict.cpp used in NI LabVIEW

    7.8
    HighCVE-2024-12742

    Deserialization of Untrusted Data Vulnerability in NI G Web Development Software

    7.8
    HighCVE-2024-4044

    Deserialization of Untrusted Data Vulnerability in FlexLogger and InstrumentStudio

    7.8
    HighCVE-2024-12741

    Deserialization Of Untrusted Data Vulnerability In NI DAQExpress Project File

    7.8
    HighCVE-2017-2775

    National Instruments LabVIEW 2016 Evaluation: Memory Corruption

    7.5
    CriticalCVE-2024-6793

    Deserialization of Untrusted Data in NI VeriStand DataLogging Server

    9.8
    HighCVE-2017-2779

    National Instruments LabVIEW 2016: Memory Corruption

    7.5
    CriticalCVE-2026-48137

    Untrusted pointer dereference in NI grpc-device sideband streaming API

    9.1
    CriticalCVE-2024-6794

    Deserialization of Untrusted Data in NI VeriStand Waveform Streaming Server

    9.8
    CriticalCVE-2024-6806

    Missing Authorization Checks In NI VeriStand Gateway For Project Resources

    9.8
    CriticalCVE-2026-9051

    Authentication Bypass Vulnerability in NI SystemLink Enterprise

    9.1
    HighCVE-2025-12097

    Relative Path Traversal Vulnerability in NI System Web Server

    7.5
    CriticalCVE-2026-9142

    Insecure Default Credentials vulnerability in NI grpc-device when TLS configuration is not present

    9.1
    HighCVE-2026-48139

    NULL pointer dereference vulnerability in NI grpc-device data moniker service

    7.5
    HighCVE-2026-48138

    Out-of-bounds read vulnerability in the NI grpc-device streaming API

    7.5
    HighCVE-2026-4129

    Improper Access Controls in NI SystemLink

    8.1
    CriticalCVE-2024-6805

    Missing Authorization Checks in NI VeriStand Gateway for File Transfer Resources

    7.5
    HighCVE-2020-25191

    CompactRIO: Incorrect Permission Assignment for Critical Resource

    7.5
    HighCVE-2025-9188

    Deserialization of Untrusted Data when parsing a DSB file with Digilent DASYLab

    also in 1 other product

    7.8
    HighCVE-2026-64199

    measX DASYLab: Out-of-bounds Read

    also in 1 other product

    7.8
    HighCVE-2026-4130

    Storage of Sensitive Information in Cleartext in NI SystemLink

    7.1
    HighCVE-2026-64198

    Out Of Bounds Read in file handling when parsing a .DSB file in DASYLab

    also in 1 other product

    7.8
    HighCVE-2026-64196

    measX DASYLab: Out-of-bounds Write

    also in 1 other product

    7.8
    HighCVE-2026-64195

    measX DASYLab: Out-of-bounds Write

    also in 1 other product

    7.8

    All vulnerabilities in search

    News

    Products