CVE-2024-6794

A deserialization of untrusted data vulnerability exists in NI VeriStand Waveform Streaming Server that may result in remote code execution. Successful exploitation requires an attacker to send a specially crafted message. These vulnerabilities affect NI VeriStand 2024 Q2 and prior versions.

• CWE-502
• CWE-502

• https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/deserialization-of-untrusted-data-vulnerabilities-in-ni-veristand.htmlVendor Advisory
• https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/deserialization-of-untrusted-data-vulnerabilities-in-ni-veristand.htmlVendor Advisory

Published

Jul 22, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-6788A remote unauthenticated attacker can use the firmware updat…9.8
• CVE-2024-6789A path traversal issue in API endpoint in M-Files Server bef…6.5
• CVE-2024-6790Loop with Unreachable Exit Condition ('Infinite Loop') vulne…6.1
• CVE-2024-6791A directory path traversal vulnerability exists when loading…7.8
• CVE-2024-6792The WP ULike WordPress plugin before 4.7.2.1 does not prope…3.5
• CVE-2024-6793A deserialization of untrusted data vulnerability exists in …9.8
• CVE-2024-6795In Connex health portal released before8/30/2024, SQL inject…9.8
• CVE-2024-6796In Baxter Connex health portal released before 8/30/2024, an…9.1
• CVE-2024-6797The DL Robots.txt WordPress plugin through 1.2 does not sani…4.8
• CVE-2024-6798The DL Verification WordPress plugin through 1.2 does not sa…4.8
• CVE-2024-6799The YITH Essential Kit for WooCommerce #1 plugin for WordPre…4.3
• CVE-2024-6800An XML signature wrapping vulnerability was present in GitHu…9.8