← Database

CVE-2026-48137

CRITICAL CVSS: 9.1 Published: 2026-06-19 Modified: 2026-06-25

Description

There is an untrusted pointer dereference vulnerability in the NI grpc-device sideband streaming API that may allow an attacker to cause an arbitrary memory dereference, potentially resulting in remote code execution.  Successful exploitation requires an attacker  to supply a specially crafted Moniker protobuf message.  This affects NI grpc-device 2.17.0 and prior versions.

Affected Platforms

Ni Ni Grpc Device ServerNi Instrumentstudio

Weakness Type

CWE-822

References