VulnerabilityAwaiting Analysis

CVE-2026-4130

There is a storage of sensitive information in cleartext vulnerability in NI SystemLink.

HIGH 8.4EPSS 0.07%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.07%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

There is a storage of sensitive information in cleartext vulnerability in NI SystemLink. This vulnerability may allow an attacker with local access to obtain sensitive information stored by the system in the clear. This vulnerability affects NI SystemLink and NI SystemLink Server 2026 Q3 and prior versions.

CVSS 4.0: 8.4 HIGHCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.07% probability · 0th percentile
CISA KEV: Not listed
Weakness: CWE-312
Source: security@ni.com

References

https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/storage-of-sensitive-information-in-cleartext-in-ni-systemlink.html

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.