CVE-2026-4129: high-severity vulnerability in NI SystemLink
Improper Access Controls in NI SystemLink
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.6epss 0.4%
There is an improper access control vulnerability in NI SystemLink that may allow an authenticated user with limited privileges to access host operating system files and directories that should be restricted. This vulnerability affects NI SystemLink and NI SystemLink Server versions prior to 2026 Q3.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Related CVEs — NI SystemLink
In the same product, most dangerous first.
CVE-2024-1156HIGHCVE-2024-1156EPSS 0.4%CVE-2024-1155HIGHIncorrect permissions for shared NI SystemLink Elixir based servicesEPSS 0.3%CVE-2024-6121HIGHNI SystemLink Server Ships Out of Date Redis VersionEPSS 0.3%CVE-2024-6122MEDIUMIncorrect Default Directory Permissions for NI SystemLink Redis ServiceEPSS 0.2%CVE-2026-4130HIGHStorage of Sensitive Information in Cleartext in NI SystemLinkEPSS 0.1%