Pilz: Vulnerabilities in 'piControl' kernel module for Industrial PC IndustrialPI
view advisory published 2026-10-20
The 'piControl' kernel module used in the IndustrialPI, prior to version 2.8.0-1, contains multiple vulnerabilities. Successful exploitation of these vulnerabilities can lead to kernel memory corruption and denial of service.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-13198US | — | — | ||
Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the event notification funct… | ||||
| CVE-2026-13197US | — | — | ||
Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the configuration and proces… | ||||
| CVE-2026-13196US | — | — | ||
Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local… | ||||
02
references
External citations — patches, advisories, analysis.
- PPSA-2026-004: Pilz: Vulnerabilities in 'piControl' kernel module for Industrial PC IndustrialPI - HTMLself
- CERT@VDE Security Advisories for Pilz GmbH & Co. KGexternal
- PPSA-2026-004: Pilz: Vulnerabilities in 'piControl' kernel module for Industrial PC IndustrialPI - CSAFself
- For further security-related issues in Pilz products please contact the Pilz Product Security Incident Response Team (PSIRT)external
03
remediations (3)
- Fixed
Update package 'picontrol' to version 2.8.0-1 or higher.
- Fixed
Update package 'picontrol' to version 2.8.0-1 or higher.
- Fixed
Update package 'picontrol' to version 2.8.0-1 or higher.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan