Back exploit-intel.com

CVE-2026-9142: Insecure Default Credentials vulnerability in NI grpc-device when TLS configuration is not present [CRITICAL] CVSS 9.1 Exploit Intelligence — Recent CVEs / 1h There is an insecure default credentials vulnerability in NI grpc-device when TLS configuration is not present and the server is bound beyond loopback. This may allow an unauthenticated user access to the server on the local network. This affects NI grpc-device 2.17.0 and prior versions.

exploit-intel.com • June 19, 2026

There is an insecure default credentials vulnerability in NI grpc-device when TLS configuration is not present and the server is bound beyond loopback. This may allow an unauthenticated user access to the server on the local network. This affects NI grpc-device 2.17.0 and prior versions.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Insecure Default Credentials Vulnerability in NI grpc-device A critical vulnerability, CVE-2026-9142, has been identified in NI grpc-device affecting versions 2.17.0 and prior. This vulnerability arises from insecure default credentials when TLS configuration is absent, allowing unauthenticated users to access the server on local networks. The CVSS base score for this vulnerability is 9.1, indicating a high severity level. Organizations using NI grpc-device should be aware of the potential for unauthorized access due to this flaw. The vulnerability was published on June 19, 2026, and is currently unpatched. Immediate action is recommended to mitigate risks associated with this vulnerability. The scope of impact includes any systems running the affected versions of NI grpc-device. 2 sources 70

Extracted Entities

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (2)

Platforms (1)

Vulnerabilities (1)