CVE-2026-4129

HighCVSS 8.1

Published: 10/09/2026(UTC)Updated: 16/09/2026(UTC)Translated: 16/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

An improper access control vulnerability in NI SystemLink may allow an authenticated user with limited privileges to access host operating system files and directories that should be restricted. Affects NI SystemLink and NI SystemLink Server versions prior to 2026 Q3.

Risk Assessment

An authenticated attacker could gain unauthorized access to sensitive system files, potentially leading to data confidentiality/integrity breaches and privilege escalation.

Recommendation

Update NI SystemLink and NI SystemLink Server to version 2026 Q3 or later to mitigate the issue.

Other vulnerabilities in NI SystemLink

CVE-2026-4130High
NI SystemLink contains a storage of sensitive information in cleartext vulnerability. An attacker with local access may obtain sensitive information stored by the system in the clear. This affects NI SystemLink and NI SystemLink Server versions prior to 2026 Q3.

Original NVD description (English source)

There is an improper access control vulnerability in NI SystemLink that may allow an authenticated user with limited privileges to access host operating system files and directories that should be restricted. This vulnerability affects NI SystemLink and NI SystemLink Server versions prior to 2026 Q3.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS