NI records

105 published records for vendor ni.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 11
With a fix record: 21.9%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

105 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
45Plan	CVE-2025-2449No exploit	NI FlexLogger usiReg URI File Parsing Directory Traversal Remote Code Execution Vulnerabilityni · flexlogger · CWE-22 pre-auth RCE Path traversal	High8.8	—	33.7%	Mar 18, 2025
41Plan	CVE-2013-5022No exploit	Absolute path traversal vulnerability in the 3D Graph ActiveX control in cw3dgrph.ocx in National Instruments LabWindows/CVI 2012 SP1 and eani · labview · CWE-22 pre-auth RCE Path traversal	Critical10.0	—	2.5%	Aug 6, 2013
39Monitor	CVE-2024-6793No exploit	Deserialization of Untrusted Data in NI VeriStand DataLogging Serverni · veristand · CWE-502 pre-auth RCE Deserialization	Critical9.8	—	1.1%	Jul 22, 2024
39Monitor	CVE-2024-6794No exploit	Deserialization of Untrusted Data in NI VeriStand Waveform Streaming Serverni · veristand · CWE-502 pre-auth RCE Deserialization	Critical9.8	—	1.1%	Jul 22, 2024
39Monitor	CVE-2024-6806No exploit	Missing Authorization Checks In NI VeriStand Gateway For Project Resourcesni · veristand · CWE-862 pre-auth RCE Broken access control (IDOR)	Critical9.8	—	1.0%	Jul 22, 2024
39Monitor	CVE-2024-6805No exploit	Missing Authorization Checks in NI VeriStand Gateway for File Transfer Resourcesni · veristand · CWE-862 pre-auth RCE Broken access control (IDOR)	Critical9.8	—	0.9%	Jul 22, 2024
39Monitor	CVE-2023-4601No exploit	Stack-based Buffer Overflow in NI System Configuration Softwareni · system configuration · CWE-121 pre-auth RCE Memory safety	Critical9.8	—	0.6%	Oct 18, 2023
38Monitor	CVE-2013-5026No exploit	An ActiveX control in lookout650.ocx, lookout660.ocx, and lookout670.ocx in National Instruments Lookout 6.5 through 6.7 allows remote attacni · lookout pre-auth RCE	Critical9.3	—	3.5%	Aug 6, 2013
38Monitor	CVE-2013-5021No exploit	Multiple absolute path traversal vulnerabilities in National Instruments cwui.ocx, as used in National Instruments LabWindows/CVI 2012 SP1 ani · labview · CWE-22 pre-auth RCE Path traversal	Critical9.3	—	2.0%	Aug 6, 2013
37Monitor	CVE-2026-48137No exploit	Untrusted pointer dereference in NI grpc-device sideband streaming APIni · instrumentstudio · CWE-822 pre-auth RCE	Critical9.3	—	0.8%	Jun 19, 2026
37Monitor	CVE-2026-9142No exploit	Insecure Default Credentials vulnerability in NI grpc-device when TLS configuration is not presentni · instrumentstudio · CWE-306 Pre-auth Auth bypass Hard-coded credentials	Critical9.3	—	0.4%	Jun 19, 2026
36Monitor	CVE-2025-7848No exploit	Missing input check in lvpict.cpp used in NI LabVIEWni · labview · CWE-1285 RCE	High8.5	—	5.7%	Jul 29, 2025
35Monitor	CVE-2024-4044No exploit	Deserialization of Untrusted Data Vulnerability in FlexLogger and InstrumentStudioni · flexlogger · CWE-502 RCE Deserialization	High7.8	—	14.6%	May 14, 2024
35Monitor	CVE-2025-2450No exploit	NI Vision Builder AI VBAI File Processing Missing Warning Remote Code Execution Vulnerabilityni · vision builder ai · CWE-356 pre-auth RCE	High8.8	—	0.5%	Mar 18, 2025
35Monitor	CVE-2023-4570No exploit	Improper Restriction in NI MeasurementLink Python Servicesni · measurementlink · CWE-420 Pre-auth	High8.8	—	0.3%	Oct 5, 2023
34Monitor	CVE-2025-9188No exploit	Deserialization of Untrusted Data when parsing a DSB file with Digilent DASYLabni · dasylab · CWE-502 RCE Deserialization	High8.5	—	0.5%	Sep 2, 2025
34Monitor	CVE-2026-48138No exploit	Out-of-bounds read vulnerability in the NI grpc-device streaming APIni · instrumentstudio · CWE-125 Pre-auth Memory safety	High8.7	—	0.4%	Jun 19, 2026
34Monitor	CVE-2026-48139No exploit	NULL pointer dereference vulnerability in NI grpc-device data moniker serviceni · instrumentstudio · CWE-476 Pre-auth Memory safety	High8.7	—	0.4%	Jun 19, 2026
34Monitor	CVE-2025-7361No exploit	Code Injection Vulnerability in NI LabVIEW when using CIN nodesni · labview · CWE-94 RCE	High8.5	—	0.3%	Jul 29, 2025
34Monitor	CVE-2025-9189No exploit	Out Of Bounds Write when parsing a DSB file with Digilent DASYLabni · dasylab · CWE-1285 RCE	High8.5	—	0.2%	Sep 2, 2025
34Monitor	CVE-2025-57778No exploit	Out Of Bounds Write to invalid source address when parsing a DSB file with Digilent DASYLabni · dasylab · CWE-1285 RCE	High8.5	—	0.2%	Sep 2, 2025
34Monitor	CVE-2025-57777No exploit	Out Of Bounds Write in displ2.dll when parsing a DSB file with Digilent DASYLabni · dasylab · CWE-1285 RCE	High8.5	—	0.2%	Sep 2, 2025
34Monitor	CVE-2025-57776No exploit	Out Of Bounds Write to invalid address when parsing a DSB file with Digilent DASYLabni · dasylab · CWE-1285 RCE	High8.5	—	0.2%	Sep 2, 2025
34Monitor	CVE-2025-57774No exploit	Out Of Bounds Write of invalid data when parsing a DSB file with Digilent DASYLabni · dasylab · CWE-1285 RCE	High8.5	—	0.2%	Sep 2, 2025
34Monitor	CVE-2025-57775No exploit	Heap-based Buffer Overflow when parsing a DSB file with Digilent DASYLabni · dasylab · CWE-1285 RCE	High8.5	—	0.2%	Sep 2, 2025

CVE-2025-2449
45Plan
NI FlexLogger usiReg URI File Parsing Directory Traversal Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 33%
- pre-auth RCE
- Path traversal
ni · flexloggerMar 18, 2025
CVE-2013-5022
41Plan
Absolute path traversal vulnerability in the 3D Graph ActiveX control in cw3dgrph.ocx in National Instruments LabWindows/CVI 2012 SP1 and ea
CriticalCVSS 10.0No exploitEPSS 2%
- pre-auth RCE
- Path traversal
ni · labviewAug 6, 2013
CVE-2024-6793
39Monitor
Deserialization of Untrusted Data in NI VeriStand DataLogging Server
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Deserialization
ni · veristandJul 22, 2024
CVE-2024-6794
39Monitor
Deserialization of Untrusted Data in NI VeriStand Waveform Streaming Server
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Deserialization
ni · veristandJul 22, 2024
CVE-2024-6806
39Monitor
Missing Authorization Checks In NI VeriStand Gateway For Project Resources
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Broken access control (IDOR)
ni · veristandJul 22, 2024
CVE-2024-6805
39Monitor
Missing Authorization Checks in NI VeriStand Gateway for File Transfer Resources
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Broken access control (IDOR)
ni · veristandJul 22, 2024
CVE-2023-4601
39Monitor
Stack-based Buffer Overflow in NI System Configuration Software
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
ni · system configurationOct 18, 2023
CVE-2013-5026
38Monitor
An ActiveX control in lookout650.ocx, lookout660.ocx, and lookout670.ocx in National Instruments Lookout 6.5 through 6.7 allows remote attac
CriticalCVSS 9.3No exploitEPSS 3%
- pre-auth RCE
ni · lookoutAug 6, 2013
CVE-2013-5021
38Monitor
Multiple absolute path traversal vulnerabilities in National Instruments cwui.ocx, as used in National Instruments LabWindows/CVI 2012 SP1 a
CriticalCVSS 9.3No exploitEPSS 2%
- pre-auth RCE
- Path traversal
ni · labviewAug 6, 2013
CVE-2026-48137
37Monitor
Untrusted pointer dereference in NI grpc-device sideband streaming API
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
ni · instrumentstudioJun 19, 2026
CVE-2026-9142
37Monitor
Insecure Default Credentials vulnerability in NI grpc-device when TLS configuration is not present
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Hard-coded credentials
ni · instrumentstudioJun 19, 2026
CVE-2025-7848
36Monitor
Missing input check in lvpict.cpp used in NI LabVIEW
HighCVSS 8.5No exploitEPSS 5%
- RCE
ni · labviewJul 29, 2025
CVE-2024-4044
35Monitor
Deserialization of Untrusted Data Vulnerability in FlexLogger and InstrumentStudio
HighCVSS 7.8No exploitEPSS 14%
- RCE
- Deserialization
ni · flexloggerMay 14, 2024
CVE-2025-2450
35Monitor
NI Vision Builder AI VBAI File Processing Missing Warning Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
ni · vision builder aiMar 18, 2025
CVE-2023-4570
35Monitor
Improper Restriction in NI MeasurementLink Python Services
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
ni · measurementlinkOct 5, 2023
CVE-2025-9188
34Monitor
Deserialization of Untrusted Data when parsing a DSB file with Digilent DASYLab
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Deserialization
ni · dasylabSep 2, 2025
CVE-2026-48138
34Monitor
Out-of-bounds read vulnerability in the NI grpc-device streaming API
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
ni · instrumentstudioJun 19, 2026
CVE-2026-48139
34Monitor
NULL pointer dereference vulnerability in NI grpc-device data moniker service
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
ni · instrumentstudioJun 19, 2026
CVE-2025-7361
34Monitor
Code Injection Vulnerability in NI LabVIEW when using CIN nodes
HighCVSS 8.5No exploitEPSS 0%
- RCE
ni · labviewJul 29, 2025
CVE-2025-9189
34Monitor
Out Of Bounds Write when parsing a DSB file with Digilent DASYLab
HighCVSS 8.5No exploitEPSS 0%
- RCE
ni · dasylabSep 2, 2025
CVE-2025-57778
34Monitor
Out Of Bounds Write to invalid source address when parsing a DSB file with Digilent DASYLab
HighCVSS 8.5No exploitEPSS 0%
- RCE
ni · dasylabSep 2, 2025
CVE-2025-57777
34Monitor
Out Of Bounds Write in displ2.dll when parsing a DSB file with Digilent DASYLab
HighCVSS 8.5No exploitEPSS 0%
- RCE
ni · dasylabSep 2, 2025
CVE-2025-57776
34Monitor
Out Of Bounds Write to invalid address when parsing a DSB file with Digilent DASYLab
HighCVSS 8.5No exploitEPSS 0%
- RCE
ni · dasylabSep 2, 2025
CVE-2025-57774
34Monitor
Out Of Bounds Write of invalid data when parsing a DSB file with Digilent DASYLab
HighCVSS 8.5No exploitEPSS 0%
- RCE
ni · dasylabSep 2, 2025
CVE-2025-57775
34Monitor
Heap-based Buffer Overflow when parsing a DSB file with Digilent DASYLab
HighCVSS 8.5No exploitEPSS 0%
- RCE
ni · dasylabSep 2, 2025