CVE-2026-9142

CVE

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

June 19, 2026

Last Seen

June 19, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Insecure Default Credentials Vulnerability in NI grpc-device69.9

A critical vulnerability, CVE-2026-9142, has been identified in NI grpc-device affecting versions 2.17.0 and prior. This vulnerability arises from insecure default credentials when TLS configuration is absent, allowing unauthenticated users to access the server on local networks. The CVSS base score...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical Insecure Default Credentials Vulnerability in NI grpc-device

Jun 19·2 sources

Related Articles (2)

CVE-2026-9142: Insecure Default Credentials vulnerability in NI grpc-device when TLS configuration is not present [CRITICAL] CVSS 9.1 Exploit Intelligence — Recent CVEs / 1h There is an insecure default credentials vulnerability in NI grpc-device when TLS configuration is not present and the server is bound beyond loopback. This may allow an unauthenticated user access to the server on the local network. This affects NI grpc-device 2.17.0 and prior versions.

exploit-intel.com·Jun 19

CVE-2026-9142 - Exploits & Severity

Related Entities

Data Breach CWE-287 - Improper Authentication CWE-798 - Use of Hard-coded Credentials NI Grpc-device Insecure Default Credentials