VULNERABILITY INTELLIGENCE

CVE-2026-9051

CVSS score9.1 CRITICAL
EPSS probability0.62%
CISA KEVNot currently listed
Published2026-05-29
Last modified2026-07-22
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Description

There is an authentication bypass vulnerability in the NI SystemLink Enterprise Dashboard application that may allow an unauthenticated remote attacker to bypass authentication controls leading to privilege escalation or information disclosure.  Successful exploitation requires an attacker to send a specially crafted HTTP request.  This vulnerability affects NI SystemLink Enterprise 2026-04 and prior versions.

Weakness classification

  • security@ni.com: CWE-306

Primary references