Skip to content
OpenAdvisories

Product · NI

grpc-device

7 known vulnerabilities.

grpc-device at a glance

Last 12 months
7
Critical · all time
2
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 5 10 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 7 vulnerabilities, 2 critical Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202672
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400
All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • Low 3.7
    CVE-2026-9143

    Incorrect Conversion between Numeric Types in NI grpc-device due to missing range checks in CodeGen

    There is an incorrect conversion between numeric types vulnerability in NI grpc-device due to missing range checks in CodeGen.  This may silently discard high bits if a size value exceeded the target type's range. This affects NI grpc-device 2.17.0 and prior …

    NI InstrumentStudio grpc-device
  • Critical 9.1
    CVE-2026-9142

    Insecure Default Credentials vulnerability in NI grpc-device when TLS configuration is not present

    There is an insecure default credentials vulnerability in NI grpc-device when TLS configuration is not present and the server is bound beyond loopback.  This may allow an unauthenticated user access to the server on the local network.  This affects NI grpc-de…

    NI InstrumentStudio grpc-device
  • Medium 5.3
    CVE-2026-48141

    Memory leak in NI grpc-device BeginSidebandStream

    There is a memory leak in NI grpc-device BeginSidebandStream that may result in denial of service due to memory exhaustion.  This affects NI grpc-device 2.17.0 and prior versions.

    NI InstrumentStudio grpc-device
  • Medium 6.5
    CVE-2026-48140

    Unchecked enum cast vulnerability in NI grpc-device in BeginSidebandStream

    There is an unchecked enum cast vulnerability in NI grpc-device BeginSidebandStream that may allow an attacker to trigger invalid enum states and undefined behavior, potentially resulting in a denial of service. Successful exploitation requires an attacker to…

    NI InstrumentStudio grpc-device
  • High 7.5
    CVE-2026-48139

    NULL pointer dereference vulnerability in NI grpc-device data moniker service

    There is a NULL pointer dereference vulnerability in NI grpc-device in the data moniker service that may allow an attacker to cause a denial of service by triggering a crash.  Successful exploitation requires an attacker to provide an unknown value to the dat…

    NI InstrumentStudio grpc-device
  • High 7.5
    CVE-2026-48138

    Out-of-bounds read vulnerability in the NI grpc-device streaming API

    There is an out-of-bounds read vulnerability in the NI grpc-device streaming API due to a missing bounds check that may result in a denial of service. Successful exploitation requires an attacker to supply a specially crafted write request. This affects NI gr…

    NI InstrumentStudio grpc-device
  • Critical 9.1
    CVE-2026-48137

    Untrusted pointer dereference in NI grpc-device sideband streaming API

    There is an untrusted pointer dereference vulnerability in the NI grpc-device sideband streaming API that may allow an attacker to cause an arbitrary memory dereference, potentially resulting in remote code execution.  Successful exploitation requires an atta…

    NI InstrumentStudio grpc-device