Security Advisory

CVE-2026-48139

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-19 13:22:32
Last updated 2026-06-22 17:31:28
Assigner NI
CVSS score 7.5
State PUBLISHED

Description

There is a NULL pointer dereference vulnerability in NI grpc-device in the data moniker service that may allow an attacker to cause a denial of service by triggering a crash.  Successful exploitation requires an attacker to provide an unknown value to the data moniker service. This affects NI grpc-device 2.17.0 and prior versions.