GCVE - cpe:2.3:a:ni:instrumentstudio:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ni:instrumentstudio:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Ni (`3f63e577-22ce-50bf-a016-4ac0c05111ef`)
Product	Instrumentstudio (`76649f10-916c-5a37-86cc-f250a48bcf03`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-9143`	vulnerable	2026-07-29 01:09:06.718674	Incorrect Conversion between Numeric Types in NI grpc-device due to missing range checks in CodeGen LOW (3.7) There is an incorrect conversion between numeric types vulnerability in NI grpc-device due to missing range checks in CodeGen. This may silently discard high bits if a size value exceeded the target type's range. This affects NI grpc-device 2.17.0 and prior versions. Published: 2026-06-19T13:48:44.874Z Updated: 2026-06-22T19:33:04.895Z Open on db.gcve.eu Reference links https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/multiple-vulnerabilities-in-ni-grpc-device-server.html https://github.com/ni/grpc-device/security/advisories/GHSA-rhh6-fvjv-8m84	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-9142`	vulnerable	2026-07-29 01:09:06.718267	Insecure Default Credentials vulnerability in NI grpc-device when TLS configuration is not present CRITICAL (9.1) There is an insecure default credentials vulnerability in NI grpc-device when TLS configuration is not present and the server is bound beyond loopback. This may allow an unauthenticated user access to the server on the local network. This affects NI grpc-device 2.17.0 and prior versions. Published: 2026-06-19T13:41:26.730Z Updated: 2026-06-22T19:29:31.269Z Open on db.gcve.eu Reference links https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/multiple-vulnerabilities-in-ni-grpc-device-server.html https://github.com/ni/grpc-device/security/advisories/GHSA-fhhw-37q8-6562	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-48141`	vulnerable	2026-07-29 00:55:01.110637	Memory leak in NI grpc-device BeginSidebandStream MEDIUM (5.3) There is a memory leak in NI grpc-device BeginSidebandStream that may result in denial of service due to memory exhaustion. This affects NI grpc-device 2.17.0 and prior versions. Published: 2026-06-19T13:37:50.361Z Updated: 2026-06-22T19:28:43.707Z Open on db.gcve.eu Reference links https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/multiple-vulnerabilities-in-ni-grpc-device-server.html https://github.com/ni/grpc-device/security/advisories/GHSA-j4qc-5v3f-rf87	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-48140`	vulnerable	2026-07-29 00:55:01.110426	Unchecked enum cast vulnerability in NI grpc-device in BeginSidebandStream MEDIUM (6.5) There is an unchecked enum cast vulnerability in NI grpc-device BeginSidebandStream that may allow an attacker to trigger invalid enum states and undefined behavior, potentially resulting in a denial of service. Successful exploitation requires an attacker to supply a specially crafted message containing an out-of-range value. This affects NI grpc-device 2.17.0 and prior versions. Published: 2026-06-19T13:32:18.095Z Updated: 2026-06-22T16:37:50.838Z Open on db.gcve.eu Reference links https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/multiple-vulnerabilities-in-ni-grpc-device-server.html https://github.com/ni/grpc-device/security/advisories/GHSA-prfr-q8h3-mqxv	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-48139`	vulnerable	2026-07-29 00:55:01.110085	NULL pointer dereference vulnerability in NI grpc-device data moniker service HIGH (7.5) There is a NULL pointer dereference vulnerability in NI grpc-device in the data moniker service that may allow an attacker to cause a denial of service by triggering a crash. Successful exploitation requires an attacker to provide an unknown value to the data moniker service. This affects NI grpc-device 2.17.0 and prior versions. Published: 2026-06-19T13:22:32.462Z Updated: 2026-06-22T17:31:28.080Z Open on db.gcve.eu Reference links https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/multiple-vulnerabilities-in-ni-grpc-device-server.html https://github.com/ni/grpc-device/security/advisories/GHSA-7vg9-5c74-289x	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-48138`	vulnerable	2026-07-29 00:55:01.109858	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-48137`	vulnerable	2026-07-29 00:55:01.109422	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-4044`	vulnerable	2026-06-08 06:50:16.921857	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.