CVE-2026-8035
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Improper input validation in the NI-PAL kernel driver may allow a local authenticated user to cause a denial of service by triggering a crash due to a NULL pointer dereference. This vulnerability affects NI-PAL 26.3.0 and prior versions on Windows and Linux.
Risk Assessment
A local user can cause a system crash, leading to disruption of services relying on the NI-PAL driver.
Recommendation
Update the NI-PAL driver to a version later than 26.3.0.
Other vulnerabilities in NI-PAL
See all- CVE-2026-18485High
A local privilege escalation vulnerability has been discovered in the NI-PAL kernel driver. It may allow a local, authenticated user to escalate privileges and execute arbitrary code. This vulnerability affects NI-PAL 26.3.1 and prior versions running on Microsoft Windows.
- CVE-2026-8036High
NI-PAL 26.3.0 and prior versions on Windows and Linux have an improper input validation vulnerability that may allow a local authenticated user to access arbitrary system memory, potentially leading to privilege escalation.
Original NVD description (English source)
Improper input validation in the NI-PAL kernel driver may allow a local authenticated user to cause a denial of service by triggering a crash due to a NULL pointer dereference. This vulnerability affects NI-PAL 26.3.0 and prior versions on Windows and Linux.