How serious is CVE-2026-0954?

This vulnerability has a CVSS score of 8.5 out of 10, classified as HIGH severity. Proof-of-concept exploit code is publicly available, making this an active threat.

Is there exploit code available for CVE-2026-0954?

Yes, proof-of-concept exploit code for CVE-2026-0954 is publicly available on GitHub and security research platforms. This increases the risk of active exploitation.

Which products are affected by CVE-2026-0954?

CVE-2026-0954 affects ni dasylab. Check the full CVE details for specific version information.

How do I fix CVE-2026-0954?

To remediate CVE-2026-0954, check for security patches from ni. Apply all available updates and security patches. If no patch is available, implement recommended workarounds or security controls to mitigate the risk.

CVE-2026-0954

High

|8.5

Exploit Available

Plain English Summary

AI-powered analysis for quick understanding

An attacker can execute malicious code on a user's system by tricking them into opening a specially crafted DSB file in Digilent DASYLab. This vulnerability affects all versions of the software and requires the user to open the corrupted file for the attack to succeed.

Technical Description

There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted DSB file in Digilent DASYLab. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This vulnerability affects all versions of Digilent DASYLab.

CVSS Vector Analysis

Attack VectorLocal

Attack ComplexityLow

Privileges RequiredNone

User InteractionRequired

Confidentiality ImpactHigh

Integrity ImpactHigh

Availability ImpactHigh

ScopeChanged

Vector String

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Exploit Resources

Search for proof-of-concept code and exploit modules

GitHub Search Exploit-DB Nuclei Templates Metasploit Vulners

Official References

NIST NVD

Est. Bounty

$4,158($1K-$5K)

Vendor Response

Grade APatched in 5 days

Quick Information

Published

Mar 13, 2026

25 days ago

Last Modified

Mar 19, 2026

19 days ago

Vendor

Product

dasylab

Related Vulnerabilities

CVE-2026-0957High

An attacker can potentially run harmful code on a user's system or access sensitive information by tricking them into opening a specially crafted file in Digilent DASYLab. This vulnerability affects all versions of the software, so any user could be at risk if they open a malicious file.

CVE-2026-0956High

An attacker can potentially run harmful code on a user's system or access sensitive information by tricking them into opening a specially crafted file in Digilent DASYLab. This vulnerability affects all versions of the software and requires the user to open the malicious file for the attack to succeed.

CVE-2026-0955High

An attacker can potentially execute harmful code or access sensitive information by tricking a user into opening a specially crafted file in Digilent DASYLab. This vulnerability affects all versions of the software, and it requires the user to open the malicious file for the attack to succeed.