NI InstrumentStudio vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20267

Newest CVEs

• CVE-2026-9143

  Incorrect Conversion between Numeric Types in NI grpc-device due to missing range checks in CodeGen

  NI · grpc-device

  Medium6.3
• CVE-2026-9142

  Insecure Default Credentials vulnerability in NI grpc-device when TLS configuration is not present

  NI · grpc-device

  Critical9.3
• CVE-2026-48141

  Memory leak in NI grpc-device BeginSidebandStream

  NI · grpc-device

  Medium6.0
• CVE-2026-48140

  Unchecked enum cast vulnerability in NI grpc-device in BeginSidebandStream

  NI · grpc-device

  High7.1
• CVE-2026-48139

  NULL pointer dereference vulnerability in NI grpc-device data moniker service

  NI · grpc-device

  High8.7
• CVE-2026-48138

  Out-of-bounds read vulnerability in the NI grpc-device streaming API

  NI · grpc-device

  High8.7
• CVE-2026-48137

  Untrusted pointer dereference in NI grpc-device sideband streaming API

  NI · grpc-device

  Critical9.3
• CVE-2024-4044

  Deserialization of Untrusted Data Vulnerability in FlexLogger and InstrumentStudio

  NI · FlexLogger

  High7.8