CVE-2026-8036

Improper input validation in NI-PAL may allow a local authenticated user to access arbitrary system memory, potentially leading to privilege escalation. This vulnerability affects NI-PAL 26.3.0 and prior versions on Windows and Linux.

Score

CVSS 4.0 8.4 High

Status

Analyzed - security@ni.com

Published

2026-06-02

Last modified

2026-06-04

Weaknesses

CWE-1285

Affected products

• Ni-pal (Ni)

References

• https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/invalid-input-valid…