CVE-2026-4130— Storage of Sensitive Information in Cleartext in NI SystemLink
Quick assessment
Affected
NI SystemLink
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
NI SystemLink 存在明文存储敏感信息漏洞。该漏洞可能允许具有本地访问权限的攻击者获取以明文形式存储的敏感信息。此漏洞影响 NI SystemLink 和 NI SystemLink Server 2026 Q3 及更早版本。
Possible ATT&CK Techniques 2 AI
T1005 · Data from Local System T1556.003 · Pluggable Authentication Modules
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-4130
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Storage of Sensitive Information in Cleartext in NI SystemLink
Source: CVE Program / CVE List V5
Vulnerability Description
There is a storage of sensitive information in cleartext vulnerability in NI SystemLink. This vulnerability may allow an attacker with local access to obtain sensitive information stored by the system in the clear. This vulnerability affects NI SystemLink and NI SystemLink Server 2026 Q3 and prior versions.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
敏感数据的明文存储
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| NI | SystemLink | 0 ~ 26.5.0 | - |
|
| NI | SystemLink Server | 0 ~ 26.5.0 | - |
|
II. Public POCs for CVE-2026-4130
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-4130
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-4130 (1)
IV. Related Vulnerabilities
Same vendor: NI
-
CVE-2026-4129
Improper Access Controls in NI SystemLink -
CVE-2026-64204
Out-of-Bounds Write Vulnerability in NI LabVIEW when loading -
CVE-2026-64203
Out-of-Bounds Read Vulnerability in NI LabVIEW when loading -
CVE-2026-64202
Out-of-Bounds Read Vulnerability in NI LabVIEW when loading -
CVE-2026-64201
Out-of-Bounds Read Vulnerability in NI LabVIEW when loading
Same weakness: CWE-312
-
CVE-2026-80058
Dell Secure Connect Gateway 加密问题漏洞 -
CVE-2026-86280
SourceCodester Syllabus-Aligned Learning Management & Examin -
CVE-2026-53603
nebula-mesh: Operator session tokens stored in plaintext in -
CVE-2026-83551
Cleartext storage of HMAC signing key in Amazon SageMaker Py -
CVE-2026-77975
Ebyte NA111-M Cleartext Storage of Sensitive Information
V. Comments for CVE-2026-4130
No comments yet