Low severity3.7NVD Advisory· Published Jun 19, 2026· Updated Jun 25, 2026

CVE-2026-9143

Description

There is an incorrect conversion between numeric types vulnerability in NI grpc-device due to missing range checks in CodeGen. This may silently discard high bits if a size value exceeded the target type's range. This affects NI grpc-device 2.17.0 and prior versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ni/InstrumentStudio3 versions
cpe:2.3:a:ni:instrumentstudio:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:ni:instrumentstudio:*:*:*:*:*:*:*:*range: <=2025
- cpe:2.3:a:ni:instrumentstudio:2026:q1:*:*:*:*:*:*
- cpe:2.3:a:ni:instrumentstudio:2026:q2:*:*:*:*:*:*
Ni/Ni Grpc Device Server
cpe:2.3:a:ni:ni_grpc_device_server:*:*:*:*:*:*:*:*
Range: <2.18.0
Ni/grpc-devicellm-fuzzy
Range: <=2.17.0

Patches

Vulnerability mechanics

References

github.com/ni/grpc-device/security/advisories/GHSA-rhh6-fvjv-8m84nvdVendor Advisory
www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/multiple-vulnerabilities-in-ni-grpc-device-server.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.240
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000