NI-PAL vulnerabilities

2 known vulnerabilities in NI-PAL from NI. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  NI-PAL: Improper Validation of Specified Index, Position, or Offset in Input

  CVE-2026-18485Aug 5, 2026NI

  There is a local privilege escalation vulnerability recently discovered in the NI-PAL kernel driver. This may allow a local, authenticated user to escalate privileges and execute arbitrary code. This vulnerability affects NI-PAL 26.3.1 and prior versions runni

• 7.8 High severity

  NI-PAL: Improper Validation of Specified Index, Position, or Offset in Input

  CVE-2026-8036Jun 2, 2026NI

  Improper input validation in NI-PAL may allow a local authenticated user to access arbitrary system memory, potentially leading to privilege escalation. This vulnerability affects NI-PAL 26.3.0 and prior versions on Windows and Linux.