CVE-2026-8035 - NULL pointer dereference in NI-PAL

Back Back to CVE browser

MEDIUM

NULL pointer dereference in NI-PAL

Published Jun 2, 2026

6.9

MEDIUM

CVSS 4.0

EPSS 0.14%

Description

Improper input validation in the NI-PAL kernel driver may allow a local authenticated user to cause a denial of service by triggering a crash due to a NULL pointer dereference. This vulnerability affects NI-PAL 26.3.0 and prior versions on Windows and Linux.

Affected products

Vendor NI Product NI-Pal Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=26.3.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

NI-Pal

unaffected

Version	Status	Constraints
0	affected	<=26.3.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33991		Advisory
https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/invalid-input-validation-vulnerabilities-in-ni-pal.html		Vendor Advisory