CVE-2026-32863

CVE-2026-32863 is a memory corruption vulnerability involving an out-of-bounds read in the sentry_transaction_context_set_operation() function within NI LabVIEW versions 26.1.0 and earlier. The flaw could enable information disclosure or arbitrary code execution if an attacker successfully tricks a user into opening a malicious VI file. The vulnerability presents a HIGH severity risk with a CVSS score of 7.8, featuring a local attack vector with low complexity and no privilege requirements. The attack depends on user interaction, but once successful, it could compromise confidentiality, integrity, and availability of the affected system. There is no current evidence of active exploitation, as the vulnerability does not appear on the Known Exploited Vulnerabilities (KEV) catalog and is marked as inactive on the Hot List. The extremely low EPSS score of 0.00016 further indicates minimal real-world exploitation activity, suggesting this remains a theoretical threat requiring user intervention for successful compromise.