Vendor
NI
115 known vulnerabilities in products by NI, 0 of them actively exploited (CISA KEV).
Key figures
115
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
8
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2025-2449 | NI FlexLogger usiReg URI File Parsing Directory Traversal Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2025-7848 | Missing input check in lvpict.cpp used in NI LabVIEW | 7.8 | |
| High | CVE-2024-12742 | Deserialization of Untrusted Data Vulnerability in NI G Web Development Software | 7.8 | |
| High | CVE-2024-4044 | Deserialization of Untrusted Data Vulnerability in FlexLogger and InstrumentStudio | 7.8 | |
| High | CVE-2024-12741 | Deserialization Of Untrusted Data Vulnerability In NI DAQExpress Project File | 7.8 | |
| High | CVE-2017-2775 | National Instruments LabVIEW 2016 Evaluation: Memory Corruption | 7.5 | |
| Critical | CVE-2024-6793 | Deserialization of Untrusted Data in NI VeriStand DataLogging Server | 9.8 | |
| High | CVE-2017-2779 | National Instruments LabVIEW 2016: Memory Corruption | 7.5 | |
| Critical | CVE-2026-48137 | Untrusted pointer dereference in NI grpc-device sideband streaming API | 9.1 | |
| Critical | CVE-2024-6794 | Deserialization of Untrusted Data in NI VeriStand Waveform Streaming Server | 9.8 | |
| Critical | CVE-2024-6806 | Missing Authorization Checks In NI VeriStand Gateway For Project Resources | 9.8 | |
| Critical | CVE-2026-9051 | Authentication Bypass Vulnerability in NI SystemLink Enterprise | 9.1 | |
| High | CVE-2025-12097 | Relative Path Traversal Vulnerability in NI System Web Server | 7.5 | |
| Critical | CVE-2026-9142 | Insecure Default Credentials vulnerability in NI grpc-device when TLS configuration is not present | 9.1 | |
| High | CVE-2026-48139 | NULL pointer dereference vulnerability in NI grpc-device data moniker service | 7.5 | |
| High | CVE-2026-48138 | Out-of-bounds read vulnerability in the NI grpc-device streaming API | 7.5 | |
| High | CVE-2026-4129 | Improper Access Controls in NI SystemLink | 8.1 | |
| Critical | CVE-2024-6805 | Missing Authorization Checks in NI VeriStand Gateway for File Transfer Resources | 7.5 | |
| High | CVE-2020-25191 | CompactRIO: Incorrect Permission Assignment for Critical Resource | 7.5 | |
| High | CVE-2025-9188 | Deserialization of Untrusted Data when parsing a DSB file with Digilent DASYLab | 7.8 | |
| High | CVE-2026-64199 | measX DASYLab: Out-of-bounds Read | 7.8 | |
| High | CVE-2026-4130 | Storage of Sensitive Information in Cleartext in NI SystemLink | 7.1 | |
| High | CVE-2026-64198 | Out Of Bounds Read in file handling when parsing a .DSB file in DASYLab | 7.8 | |
| High | CVE-2026-64196 | measX DASYLab: Out-of-bounds Write | 7.8 | |
| High | CVE-2026-64195 | measX DASYLab: Out-of-bounds Write | 7.8 |
News
- National Instruments LabViewcisa-advisories,