<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>National Instruments — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/ni" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by National Instruments (ni).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/ni.png</url>
      <title>National Instruments — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:06 GMT</lastBuildDate>
    <item>
      <title>CVE-2026-19477 · 8.6 HIGH — Stack-based Buffer Overflow Vulnerability in Linux (uldaq)</title>
      <link>https://vulnogram.org/CVE-2026-19477</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-19477</guid>
      <description>There is stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux (uldaq). This may result in information disclosure or arbitrary code execution. This vulnerability affects MCC Universal Library for Linux (ulda…</description>
      <category>High</category>
      <pubDate>Thu, 17 Sep 2026 18:42:17 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-4130 · 8.4 HIGH — Storage of Sensitive Information in Cleartext in NI SystemLink</title>
      <link>https://vulnogram.org/CVE-2026-4130</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-4130</guid>
      <description>There is a storage of sensitive information in cleartext vulnerability in NI SystemLink. This vulnerability may allow an attacker with local access to obtain sensitive information stored by the system in the clear. This vulnerability affects NI Syste…</description>
      <category>High</category>
      <pubDate>Thu, 10 Sep 2026 15:38:34 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-4129 · 8.6 HIGH — Improper Access Controls in NI SystemLink</title>
      <link>https://vulnogram.org/CVE-2026-4129</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-4129</guid>
      <description>There is an improper access control vulnerability in NI SystemLink that may allow an authenticated user with limited privileges to access host operating system files and directories that should be restricted. This vulnerability affects NI SystemLink…</description>
      <category>High</category>
      <pubDate>Thu, 10 Sep 2026 15:37:53 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-64200 · 8.5 HIGH — Out Of Bounds Read in during string conversionwhen parsing a .DSB file in DASYLab</title>
      <link>https://vulnogram.org/CVE-2026-64200</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-64200</guid>
      <description>There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read a past the end of an allocated heap buffer during string conversion. Successful exploitation requires an attacker to get…</description>
      <category>High</category>
      <pubDate>Thu, 03 Sep 2026 22:06:34 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-64199 · 8.6 HIGH — Out Of Bounds Read outside the bounds of an allocated data structure when parsing a .DSB file in DASYLab</title>
      <link>https://vulnogram.org/CVE-2026-64199</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-64199</guid>
      <description>There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read outside the bounds of an allocated data structure. Successful exploitation requires an attacker to get a user to open a s…</description>
      <category>High</category>
      <pubDate>Thu, 03 Sep 2026 22:04:43 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-64198 · 8.5 HIGH — Out Of Bounds Read in file handling when parsing a .DSB file in DASYLab</title>
      <link>https://vulnogram.org/CVE-2026-64198</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-64198</guid>
      <description>There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read a few bytes past the end of an allocated heap buffer during file handling. Successful exploitation requires an attacker t…</description>
      <category>High</category>
      <pubDate>Thu, 03 Sep 2026 22:02:28 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-64197 · 8.5 HIGH — Out Of Bounds Write when parsing a .DSB file in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure</title>
      <link>https://vulnogram.org/CVE-2026-64197</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-64197</guid>
      <description>There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure. Successful exploitation requires an attacker to get a user to open a speciall…</description>
      <category>High</category>
      <pubDate>Thu, 03 Sep 2026 21:49:18 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-64196 · 8.5 HIGH — Out Of Bounds Write when parsing a .DSB file in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated heap</title>
      <link>https://vulnogram.org/CVE-2026-64196</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-64196</guid>
      <description>There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated heap. Successful exploitation requires an attacker to get a user to open a specially crafted…</description>
      <category>High</category>
      <pubDate>Thu, 03 Sep 2026 21:46:51 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-64195 · 8.5 HIGH — Out Of Bounds Write parsing a .DSB file in DASYLab due to lack of proper validation of user-supplied data</title>
      <link>https://vulnogram.org/CVE-2026-64195</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-64195</guid>
      <description>There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions before…</description>
      <category>High</category>
      <pubDate>Thu, 03 Sep 2026 21:43:48 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-64204 · 8.5 HIGH — Out-of-Bounds Write Vulnerability in NI LabVIEW when loading VI</title>
      <link>https://vulnogram.org/CVE-2026-64204</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-64204</guid>
      <description>There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulner…</description>
      <category>High</category>
      <pubDate>Tue, 25 Aug 2026 16:52:41 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-64203 · 8.5 HIGH — Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI</title>
      <link>https://vulnogram.org/CVE-2026-64203</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-64203</guid>
      <description>There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulner…</description>
      <category>High</category>
      <pubDate>Tue, 25 Aug 2026 16:48:40 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-64202 · 8.5 HIGH — Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI</title>
      <link>https://vulnogram.org/CVE-2026-64202</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-64202</guid>
      <description>There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulner…</description>
      <category>High</category>
      <pubDate>Tue, 25 Aug 2026 16:45:51 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-64201 · 8.5 HIGH — Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI</title>
      <link>https://vulnogram.org/CVE-2026-64201</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-64201</guid>
      <description>There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulner…</description>
      <category>High</category>
      <pubDate>Tue, 25 Aug 2026 16:41:09 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-16234 · 8.5 HIGH — Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI</title>
      <link>https://vulnogram.org/CVE-2026-16234</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-16234</guid>
      <description>There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulner…</description>
      <category>High</category>
      <pubDate>Tue, 25 Aug 2026 16:36:50 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-16233 · 8.5 HIGH — Out-of-Bounds Write Vulnerability in NI LabVIEW when loading VI</title>
      <link>https://vulnogram.org/CVE-2026-16233</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-16233</guid>
      <description>There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulner…</description>
      <category>High</category>
      <pubDate>Tue, 25 Aug 2026 16:28:34 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18445 · 6.9 MEDIUM — Integer Overflow Vulnerability Resulting in an Out of Bounds Write in NI LabVIEW</title>
      <link>https://vulnogram.org/CVE-2026-18445</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18445</guid>
      <description>There is an integer overflow vulnerability resulting in an out-of-bounds write recently discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to ope…</description>
      <category>Medium</category>
      <pubDate>Tue, 25 Aug 2026 16:15:27 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18444 · 6.9 MEDIUM — Integer Conversion Vulnerability Resulting in an Out of Bounds Read in NI LabVIEW</title>
      <link>https://vulnogram.org/CVE-2026-18444</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18444</guid>
      <description>There is an integer conversion vulnerability resulting in an out-of-bounds read when loading images recently discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker…</description>
      <category>Medium</category>
      <pubDate>Tue, 25 Aug 2026 16:09:03 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18485 · 8.5 HIGH — Local Privilege Escalation in NI-PAL</title>
      <link>https://vulnogram.org/CVE-2026-18485</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18485</guid>
      <description>There is a local privilege escalation vulnerability recently discovered in the NI-PAL kernel driver. This may allow a local, authenticated user to escalate privileges and execute arbitrary code. This vulnerability affects NI-PAL 26.3.1 and prior vers…</description>
      <category>High</category>
      <pubDate>Wed, 05 Aug 2026 18:39:36 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-9143 · 6.3 MEDIUM 🌩️ — Incorrect Conversion between Numeric Types in NI grpc-device due to missing range checks in CodeGen</title>
      <link>https://vulnogram.org/CVE-2026-9143</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-9143</guid>
      <description>There is an incorrect conversion between numeric types vulnerability in NI grpc-device due to missing range checks in CodeGen. This may silently discard high bits if a size value exceeded the target type&apos;s range. This affects NI grpc-device 2.17.0 an…</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Fri, 19 Jun 2026 13:48:44 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-9142 · 9.3 CRITICAL 🌩️ — Insecure Default Credentials vulnerability in NI grpc-device when TLS configuration is not present</title>
      <link>https://vulnogram.org/CVE-2026-9142</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-9142</guid>
      <description>There is an insecure default credentials vulnerability in NI grpc-device when TLS configuration is not present and the server is bound beyond loopback. This may allow an unauthenticated user access to the server on the local network. This affects NI…</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Fri, 19 Jun 2026 13:41:26 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-48141 · 6 MEDIUM — Memory leak in NI grpc-device BeginSidebandStream</title>
      <link>https://vulnogram.org/CVE-2026-48141</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-48141</guid>
      <description>There is a memory leak in NI grpc-device BeginSidebandStream that may result in denial of service due to memory exhaustion. This affects NI grpc-device 2.17.0 and prior versions.</description>
      <category>Medium</category>
      <pubDate>Fri, 19 Jun 2026 13:37:50 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-48140 · 7.1 HIGH — Unchecked enum cast vulnerability in NI grpc-device in BeginSidebandStream</title>
      <link>https://vulnogram.org/CVE-2026-48140</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-48140</guid>
      <description>There is an unchecked enum cast vulnerability in NI grpc-device BeginSidebandStream that may allow an attacker to trigger invalid enum states and undefined behavior, potentially resulting in a denial of service. Successful exploitation requires an at…</description>
      <category>High</category>
      <pubDate>Fri, 19 Jun 2026 13:32:18 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-48139 · 8.7 HIGH 🌩️ — NULL pointer dereference vulnerability in NI grpc-device data moniker service</title>
      <link>https://vulnogram.org/CVE-2026-48139</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-48139</guid>
      <description>There is a NULL pointer dereference vulnerability in NI grpc-device in the data moniker service that may allow an attacker to cause a denial of service by triggering a crash. Successful exploitation requires an attacker to provide an unknown value to…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Fri, 19 Jun 2026 13:22:32 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-48138 · 8.7 HIGH 🌩️ — Out-of-bounds read vulnerability in the NI grpc-device streaming API</title>
      <link>https://vulnogram.org/CVE-2026-48138</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-48138</guid>
      <description>There is an out-of-bounds read vulnerability in the NI grpc-device streaming API due to a missing bounds check that may result in a denial of service. Successful exploitation requires an attacker to supply a specially crafted write request. This affe…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Fri, 19 Jun 2026 13:16:03 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-48137 · 9.3 CRITICAL 🌩️ — Untrusted pointer dereference in NI grpc-device sideband streaming API</title>
      <link>https://vulnogram.org/CVE-2026-48137</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-48137</guid>
      <description>There is an untrusted pointer dereference vulnerability in the NI grpc-device sideband streaming API that may allow an attacker to cause an arbitrary memory dereference, potentially resulting in remote code execution. Successful exploitation requires…</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Fri, 19 Jun 2026 13:05:24 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-8036 · 8.4 HIGH — Local privilege escalation in NI-PAL</title>
      <link>https://vulnogram.org/CVE-2026-8036</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-8036</guid>
      <description>Improper input validation in NI-PAL may allow a local authenticated user to access arbitrary system memory, potentially leading to privilege escalation. This vulnerability affects NI-PAL 26.3.0 and prior versions on Windows and Linux.</description>
      <category>High</category>
      <pubDate>Tue, 02 Jun 2026 17:26:18 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-8035 · 7.1 HIGH — NULL pointer dereference in NI-PAL</title>
      <link>https://vulnogram.org/CVE-2026-8035</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-8035</guid>
      <description>Improper input validation in the NI-PAL kernel driver may allow a local authenticated user to cause a denial of service by triggering a crash due to a NULL pointer dereference. This vulnerability affects NI-PAL 26.3.0 and prior versions on Windows an…</description>
      <category>High</category>
      <pubDate>Tue, 02 Jun 2026 17:22:07 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-9051 · 9.3 CRITICAL 🌩️ — Authentication Bypass Vulnerability in NI SystemLink Enterprise</title>
      <link>https://vulnogram.org/CVE-2026-9051</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-9051</guid>
      <description>There is an authentication bypass vulnerability in the NI SystemLink Enterprise Dashboard application that may allow an unauthenticated remote attacker to bypass authentication controls leading to privilege escalation or information disclosure. Succe…</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Fri, 29 May 2026 18:04:48 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-32864 · 8.5 HIGH — Out-of-Bounds Read in mgcore_SH_25_3!aligned_free()</title>
      <link>https://vulnogram.org/CVE-2026-32864</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-32864</guid>
      <description>There is a memory corruption vulnerability due to an out-of-bounds read in mgcore_SH_25_3!aligned_free() in NI LabVIEW. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker…</description>
      <category>High</category>
      <pubDate>Tue, 07 Apr 2026 19:56:42 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-32863 · 8.5 HIGH — Out-of-Bounds Read in sentry_transaction_context_set_operation()</title>
      <link>https://vulnogram.org/CVE-2026-32863</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-32863</guid>
      <description>There is a memory corruption vulnerability due to an out-of-bounds read in sentry_transaction_context_set_operation() in NI LabVIEW. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires…</description>
      <category>High</category>
      <pubDate>Tue, 07 Apr 2026 19:53:51 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-32862 · 8.5 HIGH — Out-of-Bounds Write in ResFileFactory::InitResourceMgr()</title>
      <link>https://vulnogram.org/CVE-2026-32862</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-32862</guid>
      <description>There is a memory corruption vulnerability due to an out-of-bounds write in ResFileFactory::InitResourceMgr() in NI LabVIEW. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an atta…</description>
      <category>High</category>
      <pubDate>Tue, 07 Apr 2026 19:50:36 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-32861 · 8.5 HIGH — Out-of-Bounds Write Vulnerability in NI LabVIEW when loading lvclass file</title>
      <link>https://vulnogram.org/CVE-2026-32861</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-32861</guid>
      <description>There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted LVCLASS file in NI LabVIEW. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an att…</description>
      <category>High</category>
      <pubDate>Tue, 07 Apr 2026 19:46:45 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-32860 · 8.5 HIGH — Out-of-Bounds Write Vulnerability in NI LabVIEW when loading lvlib file</title>
      <link>https://vulnogram.org/CVE-2026-32860</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-32860</guid>
      <description>There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted LVLIB file in NI LabVIEW. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attac…</description>
      <category>High</category>
      <pubDate>Tue, 07 Apr 2026 19:42:36 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-0956 · 8.5 HIGH — Out-Of-Bounds Read in Digilent DASYLab</title>
      <link>https://vulnogram.org/CVE-2026-0956</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-0956</guid>
      <description>There is a memory corruption vulnerability due to an out-of-bounds read when loading a corrupted file in Digilent DASYLab. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attack…</description>
      <category>High</category>
      <pubDate>Fri, 13 Mar 2026 15:11:31 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-0955 · 8.5 HIGH — Out-Of-Bounds Read When Opening a Corrupt File in Digilent DASYLab</title>
      <link>https://vulnogram.org/CVE-2026-0955</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-0955</guid>
      <description>There is a memory corruption vulnerability due to an out-of-bounds read when loading a corrupted file in Digilent DASYLab. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attack…</description>
      <category>High</category>
      <pubDate>Fri, 13 Mar 2026 15:07:36 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-0957 · 8.5 HIGH — Out-Of-Bounds Write in Digilent DASYLab</title>
      <link>https://vulnogram.org/CVE-2026-0957</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-0957</guid>
      <description>There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted file in Digilent DASYLab. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attac…</description>
      <category>High</category>
      <pubDate>Fri, 13 Mar 2026 14:35:08 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-0954 · 8.5 HIGH — Out-Of-Bounds Write When Opening a Corrupt DSB File in Digilent DASYLab</title>
      <link>https://vulnogram.org/CVE-2026-0954</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-0954</guid>
      <description>There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted DSB file in Digilent DASYLab. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an a…</description>
      <category>High</category>
      <pubDate>Fri, 13 Mar 2026 14:31:25 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-64469 · 8.5 HIGH — Stack-based Buffer Overflow in LVResource::DetachResource() in NI LabVIEW</title>
      <link>https://vulnogram.org/CVE-2025-64469</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-64469</guid>
      <description>There is a stack-based buffer overflow vulnerability in NI LabVIEW in LVResFile::FindRsrcListEntry() when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requir…</description>
      <category>High</category>
      <pubDate>Thu, 18 Dec 2025 14:53:36 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-64468 · 8.5 HIGH — Use-after-Free in sentry!sentry_span_set_data() in NI LabVIEW</title>
      <link>https://vulnogram.org/CVE-2025-64468</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-64468</guid>
      <description>There is a use-after-free vulnerability in sentry!sentry_span_set_data() when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user…</description>
      <category>High</category>
      <pubDate>Thu, 18 Dec 2025 14:50:02 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-64467 · 8.5 HIGH — Out-of-Bounds Read in LVResFile::FindRsrcListEntry() in NI LabVIEW</title>
      <link>https://vulnogram.org/CVE-2025-64467</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-64467</guid>
      <description>There is an out of bounds read vulnerability in NI LabVIEW in LVResFile::FindRsrcListEntry() when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an at…</description>
      <category>High</category>
      <pubDate>Thu, 18 Dec 2025 14:40:18 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-64466 · 8.5 HIGH — Out-of-Bounds Read in lvre!ExecPostedProcRecPost() in NI LabVIEW</title>
      <link>https://vulnogram.org/CVE-2025-64466</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-64466</guid>
      <description>There is an out of bounds read vulnerability in NI LabVIEW in lvre!ExecPostedProcRecPost() when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an atta…</description>
      <category>High</category>
      <pubDate>Thu, 18 Dec 2025 14:38:02 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-64465 · 8.5 HIGH — Out-of-Bounds Read in lvre!DataSizeTDR() in NI LabVIEW</title>
      <link>https://vulnogram.org/CVE-2025-64465</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-64465</guid>
      <description>There is an out of bounds read vulnerability in NI LabVIEW in lvre!DataSizeTDR() when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to ge…</description>
      <category>High</category>
      <pubDate>Thu, 18 Dec 2025 14:35:24 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-64464 · 8.5 HIGH — Out-of-Bounds Read in lvre!VisaWriteFromFile() in NI LabVIEW</title>
      <link>https://vulnogram.org/CVE-2025-64464</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-64464</guid>
      <description>There is an out of bounds read vulnerability in NI LabVIEW in lvre!VisaWriteFromFile() when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker…</description>
      <category>High</category>
      <pubDate>Thu, 18 Dec 2025 14:32:44 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-64463 · 8.5 HIGH — Out-of-Bounds Read in LVResource::DetachResource() in NI LabVIEW</title>
      <link>https://vulnogram.org/CVE-2025-64463</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-64463</guid>
      <description>There is an out of bounds read vulnerability in NI LabVIEW in LVResource::DetachResource() when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an atta…</description>
      <category>High</category>
      <pubDate>Thu, 18 Dec 2025 14:28:21 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-64462 · 8.5 HIGH — Out-of-Bounds Read in LVResFile::RGetMemFileHandle() in NI LabVIEW</title>
      <link>https://vulnogram.org/CVE-2025-64462</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-64462</guid>
      <description>There is an out of bounds read vulnerability in NI LabVIEW in LVResFile::RGetMemFileHandle() when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an at…</description>
      <category>High</category>
      <pubDate>Thu, 18 Dec 2025 14:25:21 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-64461 · 8.5 HIGH — Out of Bounds Write in mgocre_SH_25_3!RevBL() in NI LabVIEW</title>
      <link>https://vulnogram.org/CVE-2025-64461</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-64461</guid>
      <description>There is an out of bounds write vulnerability in NI LabVIEW in mgocre_SH_25_3!RevBL() when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker…</description>
      <category>High</category>
      <pubDate>Thu, 18 Dec 2025 14:21:18 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-12097 · 8.7 HIGH 🌩️ — Relative Path Traversal Vulnerability in NI System Web Server</title>
      <link>https://vulnogram.org/CVE-2025-12097</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-12097</guid>
      <description>There is a relative path traversal vulnerability in the NI System Web Server that may result in information disclosure. Successful exploitation requires an attacker to send a specially crafted request to the NI System Web Server, allowing the attacke…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 04 Dec 2025 19:07:46 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-6034 · 8.5 HIGH — Out of Bounds Read in DefaultFontOptions() in NI Circuit Design Suite</title>
      <link>https://vulnogram.org/CVE-2025-6034</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-6034</guid>
      <description>There is a memory corruption vulnerability due to an out of bounds read in DefaultFontOptions() when using SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploi…</description>
      <category>High</category>
      <pubDate>Tue, 30 Sep 2025 16:07:21 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-6033 · 8.5 HIGH — Memory Corruption issue in XML_Serialize() in NI Circuit Design Suite</title>
      <link>https://vulnogram.org/CVE-2025-6033</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-6033</guid>
      <description>There is a memory corruption vulnerability due to an out of bounds write in XML_Serialize() when using SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitati…</description>
      <category>High</category>
      <pubDate>Tue, 30 Sep 2025 16:05:53 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-10203 · 8.5 HIGH — Relative Path Traversal Vulnerability in Digilent WaveForms</title>
      <link>https://vulnogram.org/CVE-2025-10203</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-10203</guid>
      <description>Relative path traversal vulnerability due to improper input validation in Digilent WaveForms that may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .DWF3WORK file. This vuln…</description>
      <category>High</category>
      <pubDate>Mon, 15 Sep 2025 16:27:44 GMT</pubDate>
    </item>
  </channel>
</rss>
