Vulnerability · Published Sep 10, 2026 · Assigned by NI
CVE-2026-4130Storage of Sensitive Information in Cleartext in NI SystemLink
High 7.1
In plain English
A high-severity security flaw in SystemLink from NI. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities).
Severity (CVSS 3.1)7.1High
Exploit odds (30 days)0.1%top 98.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
There is a storage of sensitive information in cleartext vulnerability in NI SystemLink. This vulnerability may allow an attacker with local access to obtain sensitive information stored by the system in the clear. This vulnerability affects NI SystemLink and NI SystemLink Server versions prior to 2026 Q3.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| NI | SystemLink | 0 – before 26.5.0 |
| NI | SystemLink Server | 0 – before 26.5.0 |
Weakness: CWE-312 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N