ZDI-CAN-28516
HIGH 7.8
Upcoming
Jan 20, 2026
NI
National Instruments (NI) has a high-severity vulnerability (CVSS 7.8) that requires local access and user interaction to exploit, but when successful grants an attacker complete control over confidentiality, integrity, and availability of the affected system. The flaw was discovered by Rocco Calvi and reported in January 2026 with a vendor patch deadline of May 2026. Security teams should monitor for this advisory's public disclosure and prioritize patching NI products in their environments once fixes become available.
Advisory Details
Researcher
Discovered by:
Rocco Calvi (@TecR0c) with TecSecurity
Reported
January 20, 2026
Deadline
May 20, 2026
33d
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H