CVE-2026-4130

HighCVSS 7.1

Published: 10/09/2026(UTC)Updated: 16/09/2026(UTC)Translated: 16/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.08%

0th percentile - higher than 0% of all known CVEs

Summary

NI SystemLink contains a storage of sensitive information in cleartext vulnerability. An attacker with local access may obtain sensitive information stored by the system in the clear. This affects NI SystemLink and NI SystemLink Server versions prior to 2026 Q3.

Risk Assessment

A local attacker could read sensitive data, leading to information disclosure and loss of confidentiality. The risk is significant in environments where local access is not strictly controlled.

Recommendation

Upgrade NI SystemLink and NI SystemLink Server to version 2026 Q3 or later. Restrict local access to the system to trusted administrators only.

Other vulnerabilities in NI SystemLink

CVE-2026-4129High
An improper access control vulnerability in NI SystemLink may allow an authenticated user with limited privileges to access host operating system files and directories that should be restricted. Affects NI SystemLink and NI SystemLink Server versions prior to 2026 Q3.

Original NVD description (English source)

There is a storage of sensitive information in cleartext vulnerability in NI SystemLink. This vulnerability may allow an attacker with local access to obtain sensitive information stored by the system in the clear. This vulnerability affects NI SystemLink and NI SystemLink Server versions prior to 2026 Q3.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS