Is CVE-2026-18485 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-18485?

CVE-2026-18485 has a CVSS v3 severity of HIGH (7.8).

Back

CVE-2026-18485

Description

There is a local privilege escalation vulnerability recently discovered in the NI-PAL kernel driver. This may allow a local, authenticated user to escalate privileges and execute arbitrary code. This vulnerability affects NI-PAL 26.3.1 and prior versions running on Microsoft Windows.