Security Advisory

CVE-2026-48137

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-19 13:05:24

Last updated 2026-06-22 16:15:01

Assigner NI

CVSS score 9.1

State PUBLISHED

Description

There is an untrusted pointer dereference vulnerability in the NI grpc-device sideband streaming API that may allow an attacker to cause an arbitrary memory dereference, potentially resulting in remote code execution. Successful exploitation requires an attacker to supply a specially crafted Moniker protobuf message. This affects NI grpc-device 2.17.0 and prior versions.

← Browse all CVEs View on cve.org ↗