CVE-2026-32861

CVE-2026-32861 is a memory corruption vulnerability in National Instruments LabVIEW caused by an out-of-bounds write when processing corrupted LVCLASS files. The vulnerability affects LabVIEW 2026 Q1 (version 26.1.0) and all prior versions, and exploitation requires user interaction to open a malicious .lvclass file. The vulnerability carries a HIGH severity rating with a CVSS score of 7.8, reflecting its local attack vector, low attack complexity, and lack of required privileges. If successfully exploited, it could result in information disclosure or arbitrary code execution with high impact on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation in the wild. The vulnerability is not listed in the Known Exploited Vulnerabilities (KEV) catalog, and it is inactive on the Hot List. The EPSS score of 0.0002 indicates a very low probability of exploitation compared to other disclosed vulnerabilities, suggesting limited community attention and no publicly available exploit code at this time.