How many CVEs does NI have?

NI has 115 published CVE records since 2013, including 73 in the last two years.

How many NI CVEs are in CISA KEV?

None of NI's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which NI products have the most CVEs?

The NI products with the most published CVEs are LabVIEW, dasylab, InstrumentStudio, FlexLogger, ni grpc device server.

What are the most common weakness types in NI CVEs?

NI's CVEs most often map to these CWE weakness types: CWE-787 (Out-of-bounds Write), CWE-125 (Out-of-bounds Read), CWE-1285 (Improper Validation of Specified Index, Position, or Offset in Input), CWE-502 (Deserialization of Untrusted Data).

Are there public exploits for NI vulnerabilities?

Yes — 5 of NI's CVEs have a known public exploit.

How many critical NI vulnerabilities are there?

NI has 11 critical and 92 high-severity CVEs.

What is the average severity of NI CVEs?

The average CVSS base score across NI's scored CVEs is 8.1.

RadicalNotion.AI

Log in Create an account

115 CVEs

NI Vulnerabilities

Name: NI vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for NI.

115

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

5

Public exploits

PoC or exploit code

8.1

Avg CVSS

2013–2026

Overview

NI has 115 published CVE records since 2013, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 5 have a known public exploit. The average CVSS base score across scored CVEs is 8.1.

Security scorecard

A quick read on NI's vulnerability posture, as a share of its 115 published CVEs.

Average CVSS: 8.1
Critical / high: 90%
Actively exploited (KEV): 0%
Public exploit available: 4%
Patch available: 50%

Severity and exploitation

How the CVSS severity of NI's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical11

High92

Medium12

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of NI's CVEs are currently listed in CISA's KEV catalog.

Public exploits

5

5 of NI's CVEs have a known public exploit available.

Most affected products

The NI products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in NI CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish NI CVE records.

Disclosure activity by year

How many NI CVEs were published each year.

2017

2

2020

1

2021

2

2022

3

2023

3

2024

25

2025

37

2026

36

Latest NI CVEs

The most recently disclosed vulnerabilities affecting NI.

Storage of Sensitive Information in Cleartext in NI SystemLink
CWE-312
High · CVSS 8.4
EPSS 0.1%2026-09-10
Improper Access Controls in NI SystemLink
CWE-862
High · CVSS 8.6
EPSS 0.4%2026-09-10
Out Of Bounds Read in during string conversionwhen parsing a .DSB file in DASYLab
CWE-125
High · CVSS 8.5
EPSS 0.2%2026-09-03
Out Of Bounds Read outside the bounds of an allocated data structure when parsing a .DSB file in DASYLab
CWE-125
High · CVSS 8.6
EPSS 0.2%2026-09-03
Out Of Bounds Read in file handling when parsing a .DSB file in DASYLab
CWE-125
High · CVSS 8.5
EPSS 0.2%2026-09-03
Out Of Bounds Write when parsing a .DSB file in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure
CWE-787
High · CVSS 8.5
EPSS 0.2%2026-09-03
Out Of Bounds Write when parsing a .DSB file in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated heap
CWE-787
High · CVSS 8.5
EPSS 0.2%2026-09-03
Out Of Bounds Write parsing a .DSB file in DASYLab due to lack of proper validation of user-supplied data
CWE-787
High · CVSS 8.5
EPSS 0.2%2026-09-03
Out-of-Bounds Write Vulnerability in NI LabVIEW when loading VI
CWE-787
High · CVSS 8.5
EPSS 0.2%2026-08-25
Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI
CWE-125
High · CVSS 8.5
EPSS 0.2%2026-08-25
Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI
CWE-125
High · CVSS 8.5
EPSS 0.2%2026-08-25
Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI
CWE-125
High · CVSS 8.5
EPSS 0.2%2026-08-25

Get an alert for each new NI CVE, with AI-written analysis and remediation steps.

Monitor NI CVEs

Other vendors

CVE counts for other vendors.

Tor117 CVEs UTT117 CVEs lfprojects116 CVEs macromedia116 CVEs Insteon115 CVEs Academy Software Foundation114 CVEs struktur AG114 CVEs Dassault Systèmes113 CVEs

Browse all vendors

Frequently asked questions

Common questions about NI vulnerabilities.

How many CVEs does NI have?: NI has 115 published CVE records since 2013, including 73 in the last two years.
How many NI CVEs are in CISA KEV?: None of NI's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which NI products have the most CVEs?: The NI products with the most published CVEs are LabVIEW, dasylab, InstrumentStudio, FlexLogger, ni grpc device server.
What are the most common weakness types in NI CVEs?: NI's CVEs most often map to these CWE weakness types: CWE-787 (Out-of-bounds Write), CWE-125 (Out-of-bounds Read), CWE-1285 (Improper Validation of Specified Index, Position, or Offset in Input), CWE-502 (Deserialization of Untrusted Data).
Are there public exploits for NI vulnerabilities?: Yes — 5 of NI's CVEs have a known public exploit.
How many critical NI vulnerabilities are there?: NI has 11 critical and 92 high-severity CVEs.
What is the average severity of NI CVEs?: The average CVSS base score across NI's scored CVEs is 8.1.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track NI vulnerabilities

Get an alert for each new NI CVE, with AI-written analysis and remediation steps.

Create an account See pricing