Michael Heinzl

**Name of the Vulnerable Software and Affected Versions** Hitachi Coding Software Suite versions prior to 3.3.0 **Description** Missing Authentication for Critical Function allows an unauthenticated attacker to invoke a critical API. This could lead to unauthorized manipulation or the retrieval and alteration of sensitive information. **Recommendations** Update Hitachi Coding Software Suite to version 3.3.0 or later.

**Name of the Vulnerable Software and Affected Versions** Hitachi Coding Software Suite versions prior to 3.3.0 **Description** The software contains a flaw involving the use of a hard-coded cryptographic key. Specifically, the JWT (JSON Web Token) signing secret key is hard-coded, which allows an attacker to generate unauthorized Bearer tokens to exploit administrative functions. **Recommendations** Update Hitachi Coding Software Suite to version 3.3.0 or later.

**Name of the Vulnerable Software and Affected Versions** Hitachi Coding Software Suite versions prior to 3.3.0 **Description** An issue involving hidden functionality allows an attacker to gain unauthorized access by exploiting hard coded credentials or hidden accounts. **Recommendations** Update Hitachi Coding Software Suite to version 3.3.0 or later.

**Name of the Vulnerable Software and Affected Versions** Hitachi Coding Software Suite versions prior to 3.3.0 **Description** An issue exists that allows an attacker to perform path traversal, enabling unauthorized access, creation, modification, or deletion of files. **Recommendations** Update Hitachi Coding Software Suite to version 3.3.0 or later.

**Name of the Vulnerable Software and Affected Versions** Hitachi Coding Software Suite versions prior to 3.3.0 **Description** The software transmits sensitive information in cleartext, which allows an attacker to eavesdrop on authentication credentials and other sensitive data while in transit. **Recommendations** Update Hitachi Coding Software Suite to version 3.3.0 or later.

**Name of the Vulnerable Software and Affected Versions** Hitachi Coding Software Suite versions prior to 3.3.1 **Description** An incorrect authorization issue allows an unprivileged user to perform operations that require administrator-level privileges. **Recommendations** Update Hitachi Coding Software Suite to version 3.3.1 or later.

**Name of the Vulnerable Software and Affected Versions** NI LabVIEW versions prior to 26.3.0 **Description** A memory corruption issue exists that could lead to information disclosure or arbitrary code execution. This occurs when a user opens a specially crafted VI (Virtual Instrument), which is a LabVIEW program file. **Recommendations** Update NI LabVIEW to version 26.3.0 or later.

**Name of the Vulnerable Software and Affected Versions** NI LabVIEW versions prior to 26.3.0 **Description** A memory corruption issue exists that could lead to information disclosure or arbitrary code execution. This occurs when a user opens a specially crafted VI (Virtual Instrument), which is a LabVIEW program file. **Recommendations** Update NI LabVIEW to version 26.3.0 or later.

**Name of the Vulnerable Software and Affected Versions** NI LabVIEW versions prior to 26.3.0 **Description** A memory corruption issue exists that could lead to information disclosure or arbitrary code execution. This occurs when a user opens a specially crafted VI (Virtual Instrument), which is a LabVIEW program file. **Recommendations** Update NI LabVIEW to version 26.3.0 or later.

**Name of the Vulnerable Software and Affected Versions** NI LabVIEW versions prior to 26.3.0 **Description** A memory corruption issue exists that could lead to information disclosure or arbitrary code execution. This occurs when a user opens a specially crafted VI (Virtual Instrument), which is a LabVIEW program file. **Recommendations** Update NI LabVIEW to version 26.3.0 or later.

**Name of the Vulnerable Software and Affected Versions** NI LabVIEW versions prior to 26.3.0 **Description** A memory corruption issue exists that could lead to information disclosure or arbitrary code execution. This occurs when a user opens a specially crafted VI (Virtual Instrument), which is a LabVIEW program file. **Recommendations** Update NI LabVIEW to version 26.3.0 or later.

**Name of the Vulnerable Software and Affected Versions** NI LabVIEW versions prior to 26.3.0 **Description** A memory corruption issue exists that could lead to information disclosure or arbitrary code execution. This occurs when a user opens a specially crafted VI (Virtual Instrument), which is a LabVIEW program file. **Recommendations** Update NI LabVIEW to version 26.3.0 or later.

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined (affected versions not specified) **Description** A use-after-free issue occurs during the parsing of specially crafted files, which can lead to memory corruption. This flaw may allow an attacker to execute arbitrary code within the context of the current process. Use-after-free is a condition where a program continues to use a pointer after it has been freed, potentially allowing access to memory that has been reassigned. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Labcenter Proteus version 9 **Description** An out-of-bounds write issue exists where an attacker can cause the program to write data beyond the end of an allocated memory buffer, potentially leading to arbitrary code execution. **Recommendations** Update Labcenter Proteus version 9 to the latest patched version provided by the vendor.

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined (affected versions not specified) **Description** The application contains a stack-based buffer overflow, which occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially allowing an attacker to execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions NI LabVIEW versions prior to 2026 Q1 (26.1.0) Description A memory corruption issue exists due to an out-of-bounds read in the `sentry transaction context set operation()` function within NI LabVIEW. Successful exploitation requires a user to open a specially crafted VI file, potentially leading to information disclosure or arbitrary code execution. Recommendations Update to a version later than 2026 Q1 (26.1.0).

Name of the Vulnerable Software and Affected Versions NI LabVIEW versions prior to 26.1.0 Description A memory corruption issue exists due to an out-of-bounds write in the `ResFileFactory::InitResourceMgr()` function. This can lead to information disclosure or arbitrary code execution. An attacker can exploit this by getting a user to open a specially crafted VI file. Recommendations Update to a version later than 26.1.0.

Name of the Vulnerable Software and Affected Versions NI LabVIEW versions 2026 Q1 (26.1.0) and prior Description A memory corruption issue exists due to an out-of-bounds read in the `aligned free()` function within mgcore SH 25 3 in NI LabVIEW. Successful exploitation requires a user to open a specially crafted VI file, potentially leading to information disclosure or arbitrary code execution. Recommendations Update to a version later than 2026 Q1 (26.1.0).

Name of the Vulnerable Software and Affected Versions V-SFT versions 6.2.10.0 and prior Description V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read issue in the `VS6MemInIF!set temp type default` function. Opening a specially crafted V7 file may result in information disclosure. Recommendations Update V-SFT to a version later than 6.2.10.0.

Name of the Vulnerable Software and Affected Versions V-SFT versions 6.2.10.0 and prior Description V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read issue in the VS6ComFile!load link inf component. Opening a specially crafted V7 file may lead to information disclosure. Recommendations Update V-SFT to a version later than 6.2.10.0.