EUVD-2026-75565
GHSA-5vh5-cr3g-g663
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local low-privilege read of plaintext files; direct impact is confidentiality only - no write primitive exists in CWE-312, so I:N despite vendor's VI:H claim.
Primary rating from Vendor (NI).
CVSS VectorVendor: NI
Lifecycle Timeline
3DescriptionCVE.org
There is a storage of sensitive information in cleartext vulnerability in NI SystemLink. This vulnerability may allow an attacker with local access to obtain sensitive information stored by the system in the clear. This vulnerability affects NI SystemLink and NI SystemLink Server 2026 Q3 and prior versions.
AnalysisAI
Cleartext storage of sensitive information in NI SystemLink and NI SystemLink Server (all versions through 2026 Q3, ≤26.5.0) allows a local low-privileged user to read credentials, API keys, or other secrets written to disk without encryption. The vulnerability is rooted in CWE-312 and carries a CVSS 4.0 score of 8.4, reflecting high confidentiality and integrity impact for local access. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an active local OS session on the NI SystemLink or SystemLink Server host with at minimum low-level user privileges (PR:L per CVSS 4.0 vector). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H) confirms that exploitation is constrained to local access with low privilege, making remote unauthenticated exploitation impossible; this significantly reduces real-world risk compared to the raw score of 8.4 might suggest at first glance. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult the NI security advisory at https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/storage-of-sensitive-information-in-cleartext-in-ni-systemlink.html for the specific patched release; the advisory covers versions beyond 26.5.0 (2026 Q3). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all NI SystemLink deployments in your environment storing production credentials and implement file system access controls to restrict read access to configuration directories. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Systemlink
View allImproper access control in NI SystemLink and NI SystemLink Server (all versions through 26.5.0, 2026 Q3) allows a networ
An out-of-date version of Redis shipped with NI SystemLink Server is susceptible to multiple vulnerabilities, including
There is a cross-site scripting (XSS) vulnerability in an NI Web Server component installed with several NI products. Ra
An incorrect permission in the installation directory for the shared NI SystemLink Server KeyValueDatabase service may r
Same weakness CWE-312 – Cleartext Storage of Sensitive Information
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today