PT-2026-45848 · Ni · Ni-Pal

Patrick Saif · CVE-2026-8035 · Published 2026-06-02 · Updated 2026-06-04

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions NI-PAL versions prior to 26.3.1

Description Improper input validation in the NI-PAL kernel driver allows a local authenticated user to cause a denial of service. This occurs when a crash is triggered by a NULL pointer dereference, which happens when the software attempts to read or write to a memory address that is null, leading to a system failure.

Recommendations Update NI-PAL to a version newer than 26.3.0.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2026-8035

Affected Products

Ni-Pal

References · 4

• https://ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/invalid-input-validation-vulnerabilities-in-ni-pal.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-8035 · Security Note
• https://twitter.com/weezerOSINT/status/2062331044519620979 · Twitter Post
• https://twitter.com/weezerOSINT/status/2062331041780826349 · Twitter Post