CVE-2026-4129CWE-862broken-access-control

CVE-2026-4129

High · published September 10, 2026

CVSS v3.1
8.1
EPSS
0%
Percentile
27.4
In the wild
Unconfirmed
What it is

There is an improper access control vulnerability in NI SystemLink that may allow an authenticated user with limited privileges to access host operating system files and directories that should be restricted. This vulnerability affects NI SystemLink and NI SystemLink Server versions prior to 2026 Q3.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
8.6 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00350 · 27.4th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-09-10T20:17Z
References (1)
https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/improper-access-controls-in-ni-systemlink.html · [email protected]
EPSS history
Timeline
  • 12 SEP 03:21Z
    EPSS moved — → 0%
    epss
  • 10 SEP 15:37Z
    Improper Access Controls in NI SystemLink
    cvelistv5