Ni vulnerabilities, page 4

104 vulnerabilities

Known vulnerabilities in Ni products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 37 products.

9.8CriticalCVE-2024-6805ni · veristandMissing Authorization Checks in NI VeriStand Gateway for File Transfer ResourcesThe NI VeriStand Gateway is missing authorization checks when an actor attempts to access File Transfer resources. These missing checks may result in information disclosure or remote code execution. This affects NI VeriStand 2024 Q2 and prior versions.EPSS0.95%8.4HighCVE-2024-12741ni · daqexpressDeserialization Of Untrusted Data Vulnerability In NI DAQExpress Project FileA deserialization of untrusted data vulnerability exists in NI DAQExpress that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted project file. This vulnerability affects DAQExpress 5.1 and prior versions.  Please note that DAQExpress is an EOL product and will not receive any updates.EPSS4.21%8.4HighCVE-2024-12742ni · g_web_development_softwareDeserialization of Untrusted Data Vulnerability in NI G Web Development SoftwareA deserialization of untrusted data vulnerability exists in NI G Web Development Software that may result in arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted project file.  This vulnerability affects G Web Development Software 2022 Q3 and prior versions.EPSS5.54%7.8HighCVE-2024-12740ni · data record ad +6 moreDependency on Vulnerable Third-Party Component exposes Vulnerabilities in NI Vision SoftwareVision related software from NI used a third-party library for image processing that exposes several vulnerabilities. These vulnerabilities may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted file.EPSS0.19%7.8HighCVE-2024-23612ni · labviewImproper Error Handling Issue in LabVIEWAn improper error handling vulnerability in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions.EPSS0.60%7.8HighCVE-2024-23610ni · labviewOut of Bounds Write Due to Missing Bounds Check in LabVIEWAn out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions.EPSS0.59%7.8HighCVE-2024-23609ni · labviewImproper Error Handling Issue in LabVIEWAn improper error handling vulnerability in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions.EPSS0.59%7.8HighCVE-2024-23611ni · labviewOut of Bounds Write Due to Missing Bounds Check in LabVIEWAn out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions.EPSS0.60%7.8HighCVE-2024-23608ni · labviewOut of Bounds Write Due to Missing Bounds Check in LabVIEWAn out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions.EPSS0.59%8.5HighCVE-2026-16233ni · labviewOut-of-Bounds Write Vulnerability in NI LabVIEW when loading VIThere is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI.  This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.EPSS0.13%8.5HighCVE-2026-16234ni · labviewOut-of-Bounds Read Vulnerability in NI LabVIEW when loading VIThere is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI.  This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.EPSS0.13%8.7HighCVE-2026-48139ni · grpc-device +2 moreNULL pointer dereference vulnerability in NI grpc-device data moniker serviceThere is a NULL pointer dereference vulnerability in NI grpc-device in the data moniker service that may allow an attacker to cause a denial of service by triggering a crash.  Successful exploitation requires an attacker to provide an unknown value to the data moniker service. This affects NI grpc-device 2.17.0 and prior versions.EPSS0.49%7.5HighCVE-2026-48141ni · grpc-device +2 moreMemory leak in NI grpc-device BeginSidebandStreamThere is a memory leak in NI grpc-device BeginSidebandStream that may result in denial of service due to memory exhaustion.  This affects NI grpc-device 2.17.0 and prior versions.EPSS0.42%9.8CriticalCVE-2026-48137ni · grpc-device +2 moreUntrusted pointer dereference in NI grpc-device sideband streaming APIThere is an untrusted pointer dereference vulnerability in the NI grpc-device sideband streaming API that may allow an attacker to cause an arbitrary memory dereference, potentially resulting in remote code execution.  Successful exploitation requires an attacker  to supply a specially crafted Moniker protobuf message.  This affects NI grpc-device 2.17.0 and prior versions.EPSS0.80%8.7HighCVE-2026-48138ni · grpc-device +2 moreOut-of-bounds read vulnerability in the NI grpc-device streaming APIThere is an out-of-bounds read vulnerability in the NI grpc-device streaming API due to a missing bounds check that may result in a denial of service. Successful exploitation requires an attacker to supply a specially crafted write request. This affects NI grpc-device 2.17.0 and prior versions.EPSS0.49%7.1HighCVE-2026-48140ni · grpc-device +2 moreUnchecked enum cast vulnerability in NI grpc-device in BeginSidebandStreamThere is an unchecked enum cast vulnerability in NI grpc-device BeginSidebandStream that may allow an attacker to trigger invalid enum states and undefined behavior, potentially resulting in a denial of service. Successful exploitation requires an attacker to supply a specially crafted message containing an out-of-range value. This affects NI grpc-device 2.17.0 and prior versions.EPSS0.45%6.3MediumCVE-2026-9143ni · grpc-device +2 moreIncorrect Conversion between Numeric Types in NI grpc-device due to missing range checks in CodeGenThere is an incorrect conversion between numeric types vulnerability in NI grpc-device due to missing range checks in CodeGen.  This may silently discard high bits if a size value exceeded the target type's range. This affects NI grpc-device 2.17.0 and prior versions.EPSS0.30%9.3CriticalCVE-2026-9142ni · grpc-device +2 moreInsecure Default Credentials vulnerability in NI grpc-device when TLS configuration is not presentThere is an insecure default credentials vulnerability in NI grpc-device when TLS configuration is not present and the server is bound beyond loopback.  This may allow an unauthenticated user access to the server on the local network.  This affects NI grpc-device 2.17.0 and prior versions.EPSS0.43%9.3CriticalCVE-2026-9051ni · systemlink enterpriseAuthentication Bypass Vulnerability in NI SystemLink EnterpriseThere is an authentication bypass vulnerability in the NI SystemLink Enterprise Dashboard application that may allow an unauthenticated remote attacker to bypass authentication controls leading to privilege escalation or information disclosure.  Successful exploitation requires an attacker to send a specially crafted HTTP request.  This vulnerability affects NI SystemLink Enterprise 2026-04 and prior versions.EPSS0.78%8.4HighCVE-2026-4130ni · systemlink +1 moreStorage of Sensitive Information in Cleartext in NI SystemLinkThere is a storage of sensitive information in cleartext vulnerability in NI SystemLink. This vulnerability may allow an attacker with local access to obtain sensitive information stored by the system in the clear.  This vulnerability affects NI SystemLink and NI SystemLink Server versions prior to 2026 Q3.EPSS0.10%