Improper Input Validation in NI-PAL Affects Windows and Linux Systems
CVE-2026-8036

8.4HIGH

Key Information:

Vendor

Ni

Status
Ni-pal
Vendor
CVE Published:
2 June 2026

What is CVE-2026-8036?

In NI-PAL, improper input validation allows a local authenticated user to access arbitrary system memory. This may result in potential privilege escalation, affecting versions 26.3.0 and earlier on both Windows and Linux platforms. Users should promptly verify their systems and implement available updates to mitigate this security risk.

Affected Version(s)

NI-PAL 0 <= 26.3.0

References

https://www.ni.com/en/support/security/available-critical...

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Patrick Saif (@weezerOSINT)
.