CVE-2025-9188

There is a deserialization of untrusted data vulnerability in Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted DSB file. The vulnerability affects all versions of DASYLab.

• CWE-502

• https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-vulnerabilities-in-digilent-dasylab.htmlVendor Advisory

Published

Sep 2, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-9182Denial-of-service due to out-of-memory in the Graphics: WebR…7.5
• CVE-2025-9183Spoofing issue in the Address Bar component. This vulnerabil…6.5
• CVE-2025-9184Memory safety bugs present in Firefox ESR 140.1, Thunderbird…8.1
• CVE-2025-9185Memory safety bugs present in Firefox ESR 115.26, Firefox ES…8.1
• CVE-2025-9186Spoofing issue in the Address Bar component of Firefox Focus…6.5
• CVE-2025-9187Memory safety bugs present in Firefox 141 and Thunderbird 14…9.8
• CVE-2025-9189There is an out of bounds write vulnerability due to imprope…8.5
• CVE-2025-9190The configuration of Cursor on macOS, specifically the "RunA…4.8
• CVE-2025-9191The Houzez theme for WordPress is vulnerable to PHP Object I…6.3
• CVE-2025-9193A flaw has been found in TOTVS Portal Meu RH up to 12.1.17. …3.5
• CVE-2025-9194The Constructor theme for WordPress is vulnerable to unautho…4.3
• CVE-2025-9195Improper input validation in firmware of some Solidigm DC Pr…4.4