Is CVE-2026-18444 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-18444?

CVE-2026-18444 has a CVSS v3 severity of MEDIUM (6.6).

Back

CVE-2026-18444

Description

There is an integer conversion vulnerability resulting in an out-of-bounds read when loading images recently discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI file.  This vulnerability affects NI LabVIEW 2026 Q3 and prior versions.