CVE-2026-9142 — CRITICAL (9.1)

Q: How severe is CVE-2026-9142?

CVE-2026-9142 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.

Q: Is there a patch for CVE-2026-9142?

Check the references section above for vendor advisories and patch information. Affected products include: Ni Instrumentstudio, Ni Ni Grpc Device Server.

Vulnerability Description

There is an insecure default credentials vulnerability in NI grpc-device when TLS configuration is not present and the server is bound beyond loopback. This may allow an unauthenticated user access to the server on the local network. This affects NI grpc-device 2.17.0 and prior versions.

CVSS Score

9.1

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

NONE

Affected Products

Vendor	Product	Versions
Ni	Instrumentstudio	<= 2025
Ni	Ni Grpc Device Server	< 2.18.0

Related Weaknesses (CWE)

CWE-306

References

https://github.com/ni/grpc-device/security/advisories/GHSA-fhhw-37q8-6562Vendor Advisory
https://www.ni.com/en/support/security/available-critical-and-security-updates-fVendor Advisory

FAQ

What is CVE-2026-9142?

CVE-2026-9142 is a vulnerability with a CVSS score of 9.1 (CRITICAL). There is an insecure default credentials vulnerability in NI grpc-device when TLS configuration is not present and the server is bound beyond loopback. This may allow an unauthenticated user access t...

How severe is CVE-2026-9142?

CVE-2026-9142 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2026-9142?

Check the references section above for vendor advisories and patch information. Affected products include: Ni Instrumentstudio, Ni Ni Grpc Device Server.