NI SystemLink Enterprise Authentication Bypass Vulnerability Allowing Privilege Escalation or Information Disclosure

An authentication bypass vulnerability has been identified in the NI SystemLink Enterprise Dashboard application, affecting versions through 2026-04. This vulnerability may allow an unauthenticated remote attacker to bypass authentication controls, leading to privilege escalation limited to Dashboard resources or unauthorized information disclosure. Exploitation requires sending a specially crafted HTTP request.

Impact

Exploitation of this vulnerability could result in unauthorized access to Dashboard resources, allowing for privilege escalation or information disclosure.

Remediation

Users are advised to upgrade to NI SystemLink Enterprise version 2026-05. For more information, refer to the SystemLink Enterprise release notes and the guide on updating SystemLink Enterprise.