Skip to content
OpenAdvisories
High · 7.5 CVE-2026-48139 EUVD-2026-38027

NULL pointer dereference vulnerability in NI grpc-device data moniker service

Published Jun 19, 2026 · Updated Jun 22, 2026 · Assigned by NI

Description

There is a NULL pointer dereference vulnerability in NI grpc-device in the data moniker service that may allow an attacker to cause a denial of service by triggering a crash.  Successful exploitation requires an attacker to provide an unknown value to the data moniker service. This affects NI grpc-device 2.17.0 and prior versions.

Affected products

VendorProductAffectedFixed
NI grpc-device ≤ 2.17.0 —
NI InstrumentStudio ≤ 26.3.0 —

References