CVE-2026-16233
Received Received - Intake

Memory Corruption in NI LabVIEW

Publication date: 2026-08-25

Last updated on: 2026-08-25

Assigner: National Instruments

Description
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI.  This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-25
Last Modified
2026-08-25
Generated
2026-08-25
AI Q&A
2026-08-25
EPSS Evaluated
N/A
NVD
CVE-2026-16233
EUVD
EUVD-2026-65582

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ni labview to 26.3.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a memory corruption issue in NI LabVIEW that could allow an attacker to disclose information or execute arbitrary code. Exploitation requires tricking a user into opening a specially crafted VI file. It affects LabVIEW 2026 Q3 and earlier versions.

Detection Guidance

Detection of this vulnerability requires checking for the presence of vulnerable NI LabVIEW versions (2026 Q3 26.3.0 and prior) on systems. Inspect installed software versions and verify if any VI files are opened from untrusted sources. No specific commands are provided in the context.

Impact Analysis

If exploited, this vulnerability could let an attacker access sensitive data or run malicious code on your system. Since it requires user interaction, opening untrusted VI files poses the main risk.

Compliance Impact

The vulnerability may lead to information disclosure or arbitrary code execution, which could result in unauthorized access to sensitive data. This could potentially violate compliance requirements under GDPR or HIPAA if personal or health data is exposed.

Mitigation Strategies

Update NI LabVIEW to the latest version, specifically beyond 2026 Q3 (26.3.0), as this vulnerability affects prior versions. Avoid opening VI files from untrusted sources to prevent exploitation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-16233. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart