CVE-2026-9143

Description

References

• ni/grpc-device security advisory · Vendor Advisory
• ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/multiple-vulnerabilities-in-ni-grpc-device-server.html · Vendor Advisory

Más vulnerabilidades de instrumentstudio

• CVE-2026-9142CRÍTICO 9.1There is an insecure default credentials vulnerability in NI grpc-device when TLS configuration is not present and the server is bound beyon…
• CVE-2026-48141ALTO 7.5There is a memory leak in NI grpc-device BeginSidebandStream that may result in denial of service due to memory exhaustion.  This affects NI…
• CVE-2026-48140MEDIO 6.5There is an unchecked enum cast vulnerability in NI grpc-device BeginSidebandStream that may allow an attacker to trigger invalid enum state…
• CVE-2026-48139ALTO 7.5There is a NULL pointer dereference vulnerability in NI grpc-device in the data moniker service that may allow an attacker to cause a denial…
• CVE-2026-48138ALTO 7.5There is an out-of-bounds read vulnerability in the NI grpc-device streaming API due to a missing bounds check that may result in a denial o…