CVE-2026-48139

Description

References

• ni/grpc-device security advisory · Vendor Advisory
• ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/multiple-vulnerabilities-in-ni-grpc-device-server.html · Vendor Advisory

More vulnerabilities in instrumentstudio

• CVE-2026-9143MEDIUM 5.3There is an incorrect conversion between numeric types vulnerability in NI grpc-device due to missing range checks in CodeGen.  This may sil…
• CVE-2026-9142CRITICAL 9.1There is an insecure default credentials vulnerability in NI grpc-device when TLS configuration is not present and the server is bound beyon…
• CVE-2026-48141HIGH 7.5There is a memory leak in NI grpc-device BeginSidebandStream that may result in denial of service due to memory exhaustion.  This affects NI…
• CVE-2026-48140MEDIUM 6.5There is an unchecked enum cast vulnerability in NI grpc-device BeginSidebandStream that may allow an attacker to trigger invalid enum state…
• CVE-2026-48138HIGH 7.5There is an out-of-bounds read vulnerability in the NI grpc-device streaming API due to a missing bounds check that may result in a denial o…