Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-9142

Insecure Default Credentials vulnerability in NI grpc-device when TLS configuration is not present

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NI

Description

There is an insecure default credentials vulnerability in NI grpc-device when TLS configuration is not present and the server is bound beyond loopback.  This may allow an unauthenticated user access to the server on the local network.  This affects NI grpc-device 2.17.0 and prior versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NI grpc-device

Default version status: unaffected

  • 0 to ≤ 2.17.0affected

NI InstrumentStudio

Default version status: unaffected

  • 0 to ≤ 26.3.0affected

References