Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2753▼ 55 respecto a la semana anterior
Críticas / altas1422▲ 195 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)106▼ 394 respecto a la semana anterior
8 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Pendiente de análisis | Alta (8.4) | 0.10% | — | NI SystemlinkAINI Systemlink ServerAI | 10/9/2026 | 16/9/2026 | There is a storage of sensitive information in cleartext vulnerability in NI SystemLink. This vulnerability may allow an attacker with local access to obtain sensitive information stored by the system in the clear. This vulnerability affects NI SystemLink and NI SystemLink Server versions prior to 2026 Q3. | |
| Pendiente de análisis | Alta (8.6) | 0.35% | — | NI SystemlinkAINI Systemlink ServerAI | 10/9/2026 | 16/9/2026 | There is an improper access control vulnerability in NI SystemLink that may allow an authenticated user with limited privileges to access host operating system files and directories that should be restricted. This vulnerability affects NI SystemLink and NI SystemLink Server versions prior to 2026 Q3. | |
| Pendiente de análisis | Crítica (9.3) | 0.78% | — | National Instruments Systemlink EnterpriseAI | 29/5/2026 | 22/7/2026 | There is an authentication bypass vulnerability in the NI SystemLink Enterprise Dashboard application that may allow an unauthenticated remote attacker to bypass authentication controls leading to privilege escalation or information disclosure. Successful exploitation requires an attacker to send a specially crafted… | |
| Modificada | Media (5.5) | 0.24% | — | NI SystemlinkNI Flexlogger | 22/7/2024 | 17/6/2026 | An incorrect permission in the installation directory for the shared NI SystemLink Server KeyValueDatabase service may result in information disclosure via local access. This affects NI SystemLink Server 2024 Q1 and prior versions. It also affects NI FlexLogger 2023 Q2 and prior versions which installed this shared… | |
| Modificada | Alta (7.8) | 0.27% | — | NI FlexloggerNI Systemlink | 22/7/2024 | 17/6/2026 | An out-of-date version of Redis shipped with NI SystemLink Server is susceptible to multiple vulnerabilities, including CVE-2022-24834. This affects NI SystemLink Server 2024 Q1 and prior versions. It also affects NI FlexLogger 2023 Q2 and prior versions which installed this shared service. | |
| Analizada | Alta (7.8) | 0.35% | — | Emerson Data Record ADEmerson FlexloggerEmerson G WEB Development SoftwareEmerson Labview NXG+4 | 20/2/2024 | 17/6/2026 | Incorrect directory permissions for the shared NI RabbitMQ service may allow a local authenticated user to read RabbitMQ configuration information and potentially enable escalation of privileges. | |
| Analizada | Alta (7.8) | 0.27% | — | Emerson Data Record ADEmerson FlexloggerEmerson G WEB Development SoftwareEmerson Labview NXG+4 | 20/2/2024 | 17/6/2026 | Incorrect permissions in the installation directories for shared SystemLink Elixir based services may allow an authenticated user to potentially enable escalation of privilege via local access. | |
| Modificada | Media (6.1) | 0.56% | — | NI FlexloggerNI G WEB Development SoftwareNI LabviewNI Static Test Software Suite+1 | 21/4/2022 | 17/6/2026 | There is a cross-site scripting (XSS) vulnerability in an NI Web Server component installed with several NI products. Depending on the product(s) in use, remediation guidance includes: install SystemLink version 2021 R3 or later, install FlexLogger 2022 Q2 or later, install LabVIEW 2021 SP1, install G Web Development… |