CVE-2026-48139

概要

参考情報

• ni/grpc-device security advisory · Vendor Advisory
• ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/multiple-vulnerabilities-in-ni-grpc-device-server.html · Vendor Advisory

instrumentstudio のその他の脆弱性

• CVE-2026-9143中 5.3There is an incorrect conversion between numeric types vulnerability in NI grpc-device due to missing range checks in CodeGen.  This may sil…
• CVE-2026-9142緊急 9.1There is an insecure default credentials vulnerability in NI grpc-device when TLS configuration is not present and the server is bound beyon…
• CVE-2026-48141高 7.5There is a memory leak in NI grpc-device BeginSidebandStream that may result in denial of service due to memory exhaustion.  This affects NI…
• CVE-2026-48140中 6.5There is an unchecked enum cast vulnerability in NI grpc-device BeginSidebandStream that may allow an attacker to trigger invalid enum state…
• CVE-2026-48138高 7.5There is an out-of-bounds read vulnerability in the NI grpc-device streaming API due to a missing bounds check that may result in a denial o…