NI grpc-device CVE-2026-9143

The primary remediation is to update NI grpc-device beyond version 2.17.0 per the NI security advisory at https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/multiple-vulnerabilities-in-ni-grpc-device-server.html. No specific patched version number is confirmed in the available intelligence data - the exact fixed release must be obtained directly from the NI advisory or the GitHub Security Advisory at https://github.com/ni/grpc-device/security/advisories/GHSA-rhh6-fvjv-8m84 before deploying. If an immediate update is not operationally feasible, restrict network access to the gRPC-device server port using host-based firewall rules or network segmentation, permitting only explicitly trusted instrument clients to reach the service - this compensating control addresses the AV:N exposure but does not eliminate the underlying flaw and introduces latency overhead for legitimate clients if filtering is enforced at the application layer. Monitoring gRPC traffic for anomalously large size field values may assist in detecting exploitation attempts during the remediation window.