# cve.now: NI

The newest entries naming NI as an affected vendor (up to 200), of 84 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-4130](https://cve.now/CVE-2026-4130.md): Storage of Sensitive Information in Cleartext in NI SystemLink (CVSS 7.1)
- [CVE-2026-4129](https://cve.now/CVE-2026-4129.md): Improper Access Controls in NI SystemLink (CVSS 8.1)
- [CVE-2026-64204](https://cve.now/CVE-2026-64204.md): Out-of-Bounds Write Vulnerability in NI LabVIEW when loading VI (CVSS 7.8)
- [CVE-2026-64203](https://cve.now/CVE-2026-64203.md): Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI (CVSS 7.8)
- [CVE-2026-64202](https://cve.now/CVE-2026-64202.md): Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI (CVSS 7.8)
- [CVE-2026-64201](https://cve.now/CVE-2026-64201.md): Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI (CVSS 7.8)
- [CVE-2026-16234](https://cve.now/CVE-2026-16234.md): Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI (CVSS 7.8)
- [CVE-2026-16233](https://cve.now/CVE-2026-16233.md): Out-of-Bounds Write Vulnerability in NI LabVIEW when loading VI (CVSS 7.8)
- [CVE-2026-18445](https://cve.now/CVE-2026-18445.md): Integer Overflow Vulnerability Resulting in an Out of Bounds Write in NI LabVIEW (CVSS 6.6)
- [CVE-2026-18444](https://cve.now/CVE-2026-18444.md): Integer Conversion Vulnerability Resulting in an Out of Bounds Read in NI LabVIEW (CVSS 6.6)
- [CVE-2026-18485](https://cve.now/CVE-2026-18485.md): Local Privilege Escalation in NI-PAL (CVSS 8.5)
- [CVE-2026-9143](https://cve.now/CVE-2026-9143.md): Incorrect Conversion between Numeric Types in NI grpc-device due to missing range checks in CodeGen (CVSS 3.7)
- [CVE-2026-9142](https://cve.now/CVE-2026-9142.md): Insecure Default Credentials vulnerability in NI grpc-device when TLS configuration is not present (CVSS 9.1)
- [CVE-2026-48141](https://cve.now/CVE-2026-48141.md): Memory leak in NI grpc-device BeginSidebandStream (CVSS 5.3)
- [CVE-2026-48140](https://cve.now/CVE-2026-48140.md): Unchecked enum cast vulnerability in NI grpc-device in BeginSidebandStream (CVSS 6.5)
- [CVE-2026-48139](https://cve.now/CVE-2026-48139.md): NULL pointer dereference vulnerability in NI grpc-device data moniker service (CVSS 7.5)
- [CVE-2026-48138](https://cve.now/CVE-2026-48138.md): Out-of-bounds read vulnerability in the NI grpc-device streaming API (CVSS 7.5)
- [CVE-2026-48137](https://cve.now/CVE-2026-48137.md): Untrusted pointer dereference in NI grpc-device sideband streaming API (CVSS 9.1)
- [CVE-2026-8036](https://cve.now/CVE-2026-8036.md): Local privilege escalation in NI-PAL (CVSS 8.4)
- [CVE-2026-8035](https://cve.now/CVE-2026-8035.md): NULL pointer dereference in NI-PAL (CVSS 6.9)
- [CVE-2026-9051](https://cve.now/CVE-2026-9051.md): Authentication Bypass Vulnerability in NI SystemLink Enterprise (CVSS 9.1)
- [CVE-2026-32864](https://cve.now/CVE-2026-32864.md): Out-of-Bounds Read in mgcore\_SH\_25\_3!aligned\_free() (CVSS 7.8)
- [CVE-2026-32863](https://cve.now/CVE-2026-32863.md): Out-of-Bounds Read in sentry\_transaction\_context\_set\_operation() (CVSS 7.8)
- [CVE-2026-32862](https://cve.now/CVE-2026-32862.md): Out-of-Bounds Write in ResFileFactory::InitResourceMgr() (CVSS 7.8)
- [CVE-2026-32861](https://cve.now/CVE-2026-32861.md): Out-of-Bounds Write Vulnerability in NI LabVIEW when loading lvclass file (CVSS 7.8)
- [CVE-2026-32860](https://cve.now/CVE-2026-32860.md): Out-of-Bounds Write Vulnerability in NI LabVIEW when loading lvlib file (CVSS 7.8)
- [CVE-2025-64469](https://cve.now/CVE-2025-64469.md): Stack-based Buffer Overflow in LVResource::DetachResource() in NI LabVIEW (CVSS 7.8)
- [CVE-2025-64468](https://cve.now/CVE-2025-64468.md): Use-after-Free in sentry!sentry\_span\_set\_data() in NI LabVIEW (CVSS 7.8)
- [CVE-2025-64467](https://cve.now/CVE-2025-64467.md): Out-of-Bounds Read in LVResFile::FindRsrcListEntry() in NI LabVIEW (CVSS 7.8)
- [CVE-2025-64466](https://cve.now/CVE-2025-64466.md): Out-of-Bounds Read in lvre!ExecPostedProcRecPost() in NI LabVIEW (CVSS 7.8)
- [CVE-2025-64465](https://cve.now/CVE-2025-64465.md): Out-of-Bounds Read in lvre!DataSizeTDR() in NI LabVIEW (CVSS 7.8)
- [CVE-2025-64464](https://cve.now/CVE-2025-64464.md): Out-of-Bounds Read in lvre!VisaWriteFromFile() in NI LabVIEW (CVSS 7.8)
- [CVE-2025-64463](https://cve.now/CVE-2025-64463.md): Out-of-Bounds Read in LVResource::DetachResource() in NI LabVIEW (CVSS 7.8)
- [CVE-2025-64462](https://cve.now/CVE-2025-64462.md): Out-of-Bounds Read in LVResFile::RGetMemFileHandle() in NI LabVIEW (CVSS 7.8)
- [CVE-2025-64461](https://cve.now/CVE-2025-64461.md): Out of Bounds Write in mgocre\_SH\_25\_3!RevBL() in NI LabVIEW (CVSS 7.8)
- [CVE-2025-12097](https://cve.now/CVE-2025-12097.md): Relative Path Traversal Vulnerability in NI System Web Server (CVSS 7.5)
- [CVE-2025-6034](https://cve.now/CVE-2025-6034.md): Out of Bounds Read in DefaultFontOptions() in NI Circuit Design Suite (CVSS 7.8)
- [CVE-2025-6033](https://cve.now/CVE-2025-6033.md): Memory Corruption issue in XML\_Serialize() in NI Circuit Design Suite (CVSS 7.8)
- [CVE-2025-7849](https://cve.now/CVE-2025-7849.md): Memory Corruption Issue in NI LabVIEW due to improper error handling (CVSS 7.8)
- [CVE-2025-7848](https://cve.now/CVE-2025-7848.md): Missing input check in lvpict.cpp used in NI LabVIEW (CVSS 7.8)
- [CVE-2025-7361](https://cve.now/CVE-2025-7361.md): Code Injection Vulnerability in NI LabVIEW when using CIN nodes (CVSS 7.8)
- [CVE-2025-2634](https://cve.now/CVE-2025-2634.md): Out of Bounds Read Vulnerability in NI LabVIEW when building font map (CVSS 7.8)
- [CVE-2025-2633](https://cve.now/CVE-2025-2633.md): Out of Bounds Read Vulnerability in NI LabVIEW when loading fonts (CVSS 7.8)
- [CVE-2025-30421](https://cve.now/CVE-2025-30421.md): Stack-based Buffer Overflow in DrObjectStorage::XML\_Serialize() in NI Circuit Design Suite (CVSS 8.5)
- [CVE-2025-30420](https://cve.now/CVE-2025-30420.md): Out of Bounds Read in Bitmap::InternalDraw() in NI Circuit Design Suite (CVSS 7.8)
- [CVE-2025-30419](https://cve.now/CVE-2025-30419.md): Out of Bounds Read in GetSymbolBorderRectSize() in NI Circuit Design Suite (CVSS 7.8)
- [CVE-2025-30418](https://cve.now/CVE-2025-30418.md): Out of Bounds Write in CheckPins() in NI Circuit Design Suite (CVSS 8.5)
- [CVE-2025-30417](https://cve.now/CVE-2025-30417.md): Out of Bounds Write in Library!DecodeBase64() in NI Circuit Design Suite (CVSS 7.8)
- [CVE-2025-2632](https://cve.now/CVE-2025-2632.md): Out of Bounds Write Vulnerability in NI LabVIEW reading CPU info from cache (CVSS 8.5)
- [CVE-2025-2631](https://cve.now/CVE-2025-2631.md): Out of Bounds Write Vulnerability in NI LabVIEW in InitCPUInformation() (CVSS 7.8)
- [CVE-2025-2630](https://cve.now/CVE-2025-2630.md): DLL Hijacking Vulnerability in NI LabVIEW (CVSS 7.0)
- [CVE-2025-2629](https://cve.now/CVE-2025-2629.md): DLL Hijacking Vulnerability in NI LabVIEW When Loading NI Error Reporting (CVSS 7.0)
- [CVE-2025-2449](https://cve.now/CVE-2025-2449.md): NI FlexLogger usiReg URI File Parsing Directory Traversal Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2025-2450](https://cve.now/CVE-2025-2450.md): NI Vision Builder AI VBAI File Processing Missing Warning Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2024-12742](https://cve.now/CVE-2024-12742.md): Deserialization of Untrusted Data Vulnerability in NI G Web Development Software (CVSS 7.8)
- [CVE-2024-12740](https://cve.now/CVE-2024-12740.md): Dependency on Vulnerable Third-Party Component exposes Vulnerabilities in NI Vision Software (CVSS 7.8)
- [CVE-2024-12741](https://cve.now/CVE-2024-12741.md): Deserialization Of Untrusted Data Vulnerability In NI DAQExpress Project File (CVSS 7.8)
- [CVE-2024-10496](https://cve.now/CVE-2024-10496.md): Out of bounds read in BuildFontMap in fontmgr.cpp in NI LabVIEW (CVSS 7.8)
- [CVE-2024-10495](https://cve.now/CVE-2024-10495.md): Out of bounds read when loading the font table in fontmgr.cpp in NI LabVIEW (CVSS 7.8)
- [CVE-2024-10494](https://cve.now/CVE-2024-10494.md): Out of bounds read in HeapObjMapImpl.cpp in NI LabVIEW (CVSS 7.8)
- [CVE-2024-4081](https://cve.now/CVE-2024-4081.md): Memory Corruption Due to Improper Length Check in NI LabVIEW (CVSS 7.8)
- [CVE-2024-4080](https://cve.now/CVE-2024-4080.md): Memory Corruption Due to Improper Length Checks in LabVIEW tdcore.dll (CVSS 7.8)
- [CVE-2024-4079](https://cve.now/CVE-2024-4079.md): Out of Bounds Read Due to Missing Bounds Check in LabVIEW (CVSS 7.8)
- [CVE-2024-5602](https://cve.now/CVE-2024-5602.md): Stack-based Buffer Overflow Vulnerability in NI I/O Trace Tool (CVSS 7.8)
- [CVE-2024-6806](https://cve.now/CVE-2024-6806.md): Missing Authorization Checks In NI VeriStand Gateway For Project Resources (CVSS 9.8)
- [CVE-2024-6805](https://cve.now/CVE-2024-6805.md): Missing Authorization Checks in NI VeriStand Gateway for File Transfer Resources (CVSS 7.5)
- [CVE-2024-6794](https://cve.now/CVE-2024-6794.md): Deserialization of Untrusted Data in NI VeriStand Waveform Streaming Server (CVSS 9.8)
- [CVE-2024-6793](https://cve.now/CVE-2024-6793.md): Deserialization of Untrusted Data in NI VeriStand DataLogging Server (CVSS 9.8)
- [CVE-2024-6791](https://cve.now/CVE-2024-6791.md): Directory Path Traversal Vulnerability in NI VeriStand with vsmodel Files (CVSS 7.8)
- [CVE-2024-6675](https://cve.now/CVE-2024-6675.md): Deserialization of Untrusted Data Vulnerability in NI VeriStand Project File (CVSS 7.8)
- [CVE-2024-6638](https://cve.now/CVE-2024-6638.md): Integer Overflow Vulnerability Reading TDMS Files in LabVIEW (CVSS 5.5)
- [CVE-2024-6121](https://cve.now/CVE-2024-6121.md): NI SystemLink Server Ships Out of Date Redis Version (CVSS 7.8)
- [CVE-2024-6122](https://cve.now/CVE-2024-6122.md): Incorrect Default Directory Permissions for NI SystemLink Redis Service (CVSS 5.5)
- [CVE-2024-4044](https://cve.now/CVE-2024-4044.md): Deserialization of Untrusted Data Vulnerability in FlexLogger and InstrumentStudio (CVSS 7.8)
- [CVE-2024-23612](https://cve.now/CVE-2024-23612.md): Improper Error Handling Issue in LabVIEW (CVSS 7.8)
- [CVE-2024-23609](https://cve.now/CVE-2024-23609.md): Improper Error Handling Issue in LabVIEW (CVSS 7.8)
- [CVE-2024-23611](https://cve.now/CVE-2024-23611.md): Out of Bounds Write Due to Missing Bounds Check in LabVIEW (CVSS 7.8)
- [CVE-2024-23610](https://cve.now/CVE-2024-23610.md): Out of Bounds Write Due to Missing Bounds Check in LabVIEW (CVSS 7.8)
- [CVE-2024-23608](https://cve.now/CVE-2024-23608.md): Out of Bounds Write Due to Missing Bounds Check in LabVIEW (CVSS 7.8)
- [CVE-2024-1156](https://cve.now/CVE-2024-1156.md): Incorrect directory permissions for the shared NI RabbitMQ service may allow a local authenticated user to read RabbitMQ configuration infor (CVSS 7.8)
- [CVE-2024-1155](https://cve.now/CVE-2024-1155.md): Incorrect permissions for shared NI SystemLink Elixir based services (CVSS 7.8)
- [CVE-2023-5136](https://cve.now/CVE-2023-5136.md): Incorrect Permission Assignment in the TopoGrafix DataPlugin for GPX (CVSS 5.5)
- [CVE-2023-4601](https://cve.now/CVE-2023-4601.md): Stack-based Buffer Overflow in NI System Configuration Software (CVSS 8.1)
- [CVE-2023-4570](https://cve.now/CVE-2023-4570.md): Improper Restriction in NI MeasurementLink Python Services (CVSS 8.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/ni
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.