Critical Security Update
To help protect your systems, customers using NI driver software 2026 Q2 or earlier should visit ni.com/ni-pal-update and follow the recommended actions.
There is a storage of sensitive information in cleartext vulnerability in NI SystemLink. This vulnerability may allow an attacker with local access to obtain sensitive information stored by the system in the clear. This vulnerability affects NI SystemLink and NI SystemLink Server versions prior to 2026 Q3.
This vulnerability is identified as CVE-2026-4130.
NI strongly recommends upgrading the affected software to mitigate these vulnerabilities. Refer to the Affected Products section for information on upgrading these products.
We view the security of our products as an important part of our commitment to our customers. Go to ni.com/security to stay informed and act upon security alerts and issues.
| Product Version | Mitigation |
|---|---|
| NI SystemLink | Upgrade to NI SystemLink 2026 Q3 or later from NI Package Manager or Software Downloads. |
| NI SystemLink Server | Upgrade to NI SystemLink 2026 Q3 or later from NI Package Manager or Software Downloads. |
| NI SystemLink Enterprise | Not Affected |