Threat Investigation
Request a demo

CVE-2026-4129

High

Description

There is an improper access control vulnerability in NI SystemLink that may allow an authenticated user with limited privileges to access host operating system files and directories that should be restricted. This vulnerability affects NI SystemLink and NI SystemLink Server versions prior to 2026 Q3.

SeverityHigh
CVSS8.1
Exploit probability—
ProductSystemLink
PublishedSep 10, 2026
First seenSep 10, 2026
Weakness typeCWE-862Missing authorization

How to fix

Update
  • NI SystemLink26.5.0 or later
  • NI SystemLink Server26.5.0 or later

Affected products

ProductAffected versionsFixed in
NI SystemLinkv < 26.5.026.5.0
NI SystemLink Serverv < 26.5.026.5.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.