CVE-2026-9051
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
An authentication bypass vulnerability in the NI SystemLink Enterprise Dashboard application. An unauthenticated remote attacker can bypass authentication controls, leading to privilege escalation or information disclosure.
Risk Assessment
An attacker can gain unauthorized access to the management dashboard, escalate privileges, or steal sensitive data.
Recommendation
Update NI SystemLink Enterprise to a version later than 2026-04 that fixes this vulnerability.
Original NVD description (English source)
There is an authentication bypass vulnerability in the NI SystemLink Enterprise Dashboard application that may allow an unauthenticated remote attacker to bypass authentication controls leading to privilege escalation or information disclosure. Successful exploitation requires an attacker to send a specially crafted HTTP request. This vulnerability affects NI SystemLink Enterprise 2026-04 and prior versions.