Security Advisory

CVE-2026-48138

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-19 13:16:03
Last updated 2026-06-22 16:14:14
Assigner NI
CVSS score 7.5
State PUBLISHED

Description

There is an out-of-bounds read vulnerability in the NI grpc-device streaming API due to a missing bounds check that may result in a denial of service. Successful exploitation requires an attacker to supply a specially crafted write request. This affects NI grpc-device 2.17.0 and prior versions.