CVE-2026-4130: Storage of Sensitive Information in Cleartext in NI SystemLink
Published Sep 10, 2026
·Updated
There is a storage of sensitive information in cleartext vulnerability in NI SystemLink. This vulnerability may allow an attacker with local access to obtain sensitive information stored by the system in the clear. This vulnerability affects NI SystemLink and NI SystemLink Server 2026 Q3 and prior versions.
Affected Software
2 affected components
NI SystemLink<=2026 Q3
NI SystemLink Server 2026<=2026 Q3
Event History
Sep 10, 2026
CVE Published
via MITRE·03:38 PM
Data Sourced
via MITRE·03:38 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who is realistically exposed to this issue?
Systems running NI SystemLink or NI SystemLink Server 2026 Q3 or an earlier affected version are exposed if an attacker can obtain local access to the system.
2
What level of access does an attacker need?
An attacker needs local access and low privileges. No user interaction is required.
3
What information could be at risk?
Sensitive information stored by the system in cleartext may be obtainable by a local attacker. The available information does not identify the specific data types or storage locations involved.