CVE-2026-48140

Katalog CVE

CVSS 6.5 · Medium EPSS 0,45%

Kerentanan Incorrect Type Conversion or Cast pada ni instrumentstudio, ni grpc device server. Skor CVSS 3.1 6.5 (Medium) menurut ni.com.

Deskripsi (NVD)

There is an unchecked enum cast vulnerability in NI grpc-device BeginSidebandStream that may allow an attacker to trigger invalid enum states and undefined behavior, potentially resulting in a denial of service. Successful exploitation requires an attacker to supply a specially crafted message containing an out-of-range value. This affects NI grpc-device 2.17.0 and prior versions.

Rincian

Terbit di NVD

19 Juni 2026

Terakhir diubah

25 Juni 2026

Status NVD

Analyzed

CVSS 3.1

6.5 (Medium), sumber ni.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-704: Incorrect Type Conversion or Cast

EPSS (30 hari)

0,45% peluang dieksploitasi; lebih tinggi dari 36,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/ni/grpc-device/security/advisories/GHSA-prfr-q8h3-mqxv advisory vendor
• https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/multiple-v... advisory vendor