CVE-2026-18485CWE-1285

CVE-2026-18485

High · published August 5, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
5.7
In the wild
Unconfirmed
What it is

There is a local privilege escalation vulnerability recently discovered in the NI-PAL kernel driver.  This may allow a local, authenticated user to escalate privileges and execute arbitrary code.  This vulnerability affects NI-PAL 26.3.1 and prior versions running on Microsoft Windows.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00167 · 5.7th percentile
Weakness
CWE-1285 · Improper Validation of Specified Index, Position, or Offset in Input
Published
2026-08-05T23:17Z
References (1)
https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/local-privilege-escalation-in-ni-pal.html · [email protected]
EPSS history
Timeline
  • 05 AUG 18:39Z
    Local Privilege Escalation in NI-PAL
    cvelistv5