CVE-2026-18485: Local Privilege Escalation in NI-PAL
Published Aug 5, 2026
·Updated
There is a local privilege escalation vulnerability recently discovered in the NI-PAL kernel driver. This may allow a local, authenticated user to escalate privileges and execute arbitrary code. This vulnerability affects NI-PAL 26.3.1 and prior versions running on Microsoft Windows.
Affected Software
2 affected components
NI NI-PAL<=26.3.1
Microsoft Windows
Event History
Aug 5, 2026
CVE Published
via MITRE·06:39 PM
Data Sourced
via MITRE·06:39 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-18485?
CVE-2026-18485 has a severity rating of 7.8, which is classified as high.
2
How do I fix CVE-2026-18485?
To mitigate CVE-2026-18485, upgrade to NI-PAL version 26.3.2 or later.
3
Who is affected by CVE-2026-18485?
CVE-2026-18485 affects authenticated users of NI-PAL versions 26.3.1 and prior running on Microsoft Windows.
4
What kind of vulnerability is CVE-2026-18485?
CVE-2026-18485 is a local privilege escalation vulnerability that allows an authenticated user to execute arbitrary code.
5
When was CVE-2026-18485 published?
CVE-2026-18485 was published on August 5, 2026.