CVE-2026-32862

OVERVIEW CVE-2026-32862 is a memory corruption vulnerability resulting from an out-of-bounds write in the ResFileFactory::InitResourceMgr() function of NI LabVIEW. The flaw affects NI LabVIEW 2026 Q1 (26.1.0) and all prior versions, requiring user interaction to exploit. SEVERITY The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector, low attack complexity, and no privileges required. Successful exploitation demands that a user open a malicious VI file, after which an attacker could achieve information disclosure or arbitrary code execution with high impact across confidentiality, integrity, and availability. EXPLOITATION STATUS This vulnerability is not currently on the Known Exploited Vulnerabilities (KEV) catalog and is marked as inactive on the Hot List, indicating no evidence of active exploitation in the wild. The EPSS score of 0.0002 reflects exceptionally low probability of exploitation in real-world conditions. No public exploit code is currently available, and community attention remains minimal despite the vulnerability's potential severity.