PT-2026-44971 · Ni · Systemlink Enterprise

Published 2026-05-29 · Updated 2026-05-30 · CVE-2026-9051

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions NI SystemLink Enterprise versions prior to 2026-04

Description An authentication bypass in the NI SystemLink Enterprise Dashboard application allows an unauthenticated remote attacker to circumvent authentication controls. This can be achieved by sending a specially crafted HTTP request, potentially leading to privilege escalation or information disclosure.

Recommendations Update to a version newer than 2026-04.

Fix

LPE

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2026-9051

Affected Products

Systemlink Enterprise

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-9051 · Security Note
• https://twitter.com/CVEnew/status/2060470691300884514 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2060545664694530513 · Twitter Post
• https://ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/authentication-bypass-vulnerability-in-ni-systemlink-enterprise.html · Note
• https://twitter.com/infoflowcloud/status/2060471422636491213 · Twitter Post
• https://twitter.com/UpwindMDR/status/2060619652103839764 · Twitter Post