CVE-2026-9051 is a critical authentication bypass vulnerability (CWE-306) in NI SystemLink Enterprise Dashboard that permits unauthenticated remote attackers to bypass authentication mechanisms by sending specially crafted HTTP requests. This flaw enables attackers to escalate privileges or disclose sensitive information. It affects versions 2026-04 and prior. The vulnerability has a CVSS 3.1 base score of 9.1, indicating high impact on confidentiality and integrity with no required privileges or user interaction for exploitation. No patch or official remediation level has been disclosed by NI as of the publication date.

Successful exploitation allows unauthenticated remote attackers to bypass authentication controls, potentially leading to privilege escalation or unauthorized disclosure of sensitive information within the affected NI SystemLink Enterprise environment. This compromises confidentiality and integrity but does not affect availability. The high CVSS score reflects the critical nature of this vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the NI SystemLink Enterprise Dashboard application to trusted users only and monitor for unusual HTTP requests that may indicate exploitation attempts.