Critical Security Update
To help protect your systems, customers using NI driver software 2026 Q2 or earlier should visit ni.com/ni-pal-update and follow the recommended actions.
There is stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux (uldaq). This may result in information disclosure or arbitrary code execution. This vulnerability affects MCC Universal Library for Linux (uldaq) v1.2.1 and prior versions.
This vulnerability is identified as CVE-2026-19477.
We strongly recommend upgrading the affected software to mitigate these vulnerabilities. Refer to the Affected Products section for information on upgrading these products.
NI Update Service is a Windows utility that checks for and delivers updates for NI software and drivers, including security updates. It can be used to manually check for updates, configured to periodically check and notify users, or to automatically download and install updates at a scheduled time.
Some mitigations in this advisory are delivered through NI Update Service. We recommend upgrading to NI Update Service 2026 Q3 or later to get the latest updates. NI Update Service can be installed on its own and is backwards compatible with older NI software.
We view the security of our products as an important part of our commitment to our customers. Go to ni.com/security to stay informed and act upon security alerts and issues.
NI would like to thank Tsurumi Junichi of Panasonic Holdings Corporation for reporting this issue and working with us on coordinated disclosure.
| Product Version | Mitigation |
|---|---|
| MCC Universal Library for Linux (uldaq) v1.2.1 and prior versions | Update to MCC uldaq v1.2.2 or later.
|