Skip to content
Critical Insecure Default Credentials Vulnerability in NI grpc-device

Critical Insecure Default Credentials Vulnerability in NI grpc-device

First seen 19 Jun 2026, 20:22 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •June 20, 2026 at 20:21 UTC
  • •CVE-2026-9142 is a critical vulnerability with a CVSS score of 9.1.
  • •The flaw allows unauthenticated access to NI grpc-device servers on local networks.
  • •Affected versions include NI grpc-device 2.17.0 and earlier, with no patch currently available.

A critical vulnerability, CVE-2026-9142, has been identified in NI grpc-device affecting versions 2.17.0 and prior. This vulnerability arises from insecure default credentials when TLS configuration is absent, allowing unauthenticated users to access the server on local networks. The CVSS base score for this vulnerability is 9.1, indicating a high severity level. Organizations using NI grpc-device should be aware of the potential for unauthorized access due to this flaw. The vulnerability was published on June 19, 2026, and is currently unpatched. Immediate action is recommended to mitigate risks associated with this vulnerability. The scope of impact includes any systems running the affected versions of NI grpc-device.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 93d ago How this analysis works

Timeline

2026-06-19
CVE-2026-9142 published
NI grpc-device vulnerability disclosed, allowing unauthorized access due to insecure default credentials.
Feedly
2026-06-19
Exploit details reported
Exploit Intelligence reports on CVE-2026-9142, highlighting the critical nature of the vulnerability.
exploit-intel.com

More articles in this cluster (4)

Following this threat?

Track CVE-2026-9142 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 3