What’s Vulnerable › Vulnerabilities
CVE-2024-12741: Deserialization Of Untrusted Data Vulnerability In NI DAQExpress Project File
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 4.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-12-18 · updated 2026-06-17
- Weakness: CWE-502
Description
A deserialization of untrusted data vulnerability exists in NI DAQExpress that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted project file. This vulnerability affects DAQExpress 5.1 and prior versions. Please note that DAQExpress is an EOL product and will not receive any updates.
Affected products
References
Get alerted when CVE-2024-12741 or the next vulnerability affects your stack