ZDI-CAN-28516 HIGH 7.8 Upcoming Jan 20, 2026

NI

National Instruments (NI) has a high-severity vulnerability (CVSS 7.8) that requires local access and user interaction to exploit, but when successful grants an attacker complete control over confidentiality, integrity, and availability of the affected system. The flaw was discovered by Rocco Calvi and reported in January 2026 with a vendor patch deadline of May 2026. Security teams should monitor for this advisory's public disclosure and prioritize patching NI products in their environments once fixes become available.

Advisory Details
Researcher Discovered by: Rocco Calvi (@TecR0c) with TecSecurity
Reported January 20, 2026
Deadline May 20, 2026 33d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy