CVE-2025-41646

criticalpriority · track · 28EPSS 0.513 · 99 %ileexploit · PoCDEEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

2 exploits · PoC

Likely / severe?

51.3% (99th) EPSS

CVSS 9.8 · critical

Is it mine?

14 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-27

An unauthorized remote attacker can bypass the authentication of the affected software package by misusing an incorrect type conversion. This leads to full compromise of the device

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedwebstatuskunbus_psirt
Install the updated package version 2.4.6 either using apt-get update && apt-get upgrade or download it manually and install via dpkg.
https://packages.revolutionpi.de/pool/main/r/revpi-webstatus/revpi-webstatus_2.4.6-1+revpi11+1_all.deb
FixedRevolution Pi webstatuscisa_csaf_ot
For Revolution Pi Webstatus Version 2.4.5 and prior: Install the updated package Version 2.4.6 either using apt-get update && apt-get upgrade or download it manually and install via dpkg.
https://packages.revolutionpi.de/pool/main/r/revpi-webstatus/revpi-webstatus_2.4.6-1+revpi11+1_all.deb
MitigationRevolution Pi OS Bullseyecisa_csaf_ot
KUNBUS has identified the following specific workarounds and mitigations users can apply to reduce risk:
MitigationRevolution Pi webstatuscisa_csaf_ot
KUNBUS has identified the following specific workarounds and mitigations users can apply to reduce risk:

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · CISA US

v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · info@cert.vde.comexploitability 3.9 · impact 5.9

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Hsecondary · CVSS-BT (t0sche)

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · KUNBUS PSIRT

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-303USCWE-303USCWE-303USCWE-704USCWE-704US

exploits (2)

Public proof-of-concept and weaponised exploit code.

GreenForceNetworks/CVE-2025-41646---Critical-Authentication-Bypass-CVE-2025-41646 - Critical Authentication bypassPoC · poc_in_github
r0otk3r/CVE-2025-41646r0otk3r/CVE-2025-41646PoC · poc_in_github

affected products (14)

Products and version ranges known to be affected.

KUNBUS Revolution Pi OS Bullseye: 02/2024all versionscisa_csaf_otUS
KUNBUS Revolution Pi OS Bullseye: 04/2024all versionscisa_csaf_otUS
KUNBUS Revolution Pi OS Bullseye: 06/2023all versionscisa_csaf_otUS
KUNBUS Revolution Pi OS Bullseye: 07/2023all versionscisa_csaf_otUS
KUNBUS Revolution Pi OS Bullseye: 09/2023all versionscisa_csaf_otUS
KUNBUS Revolution Pi Webstatus: <=2.4.5all versionscisa_csaf_otUS
KUNBUS Revolution Pi OS Bullseyeall versionscisa_csaf_otUS
Kunbus Revolution Pi webstatus≤ 2.4.5cisa_csaf_otUS
Kunbus Revolution Pi webstatus≤ 0.0.0 ≤2.4.5enisa_euvdEU
Kunbus Revolution Pi webstatus≤ 2.4.6fstec_bduRU
Revolution Pi OS Bullseyeall versionskunbus_psirtDE
webstatus≤ 2.4.5kunbus_psirtDE
webstatusall versionsfixedkunbus_psirtDE
kunbus revpi status< 2.4.6nvdUScpe:2.3:a:kunbus:revpi_status:*:*:*:*:*:*:*:*

advisories (2)

Vendor and ecosystem advisories describing this.

Kunbus-2025-0000003Authentication Bypass in RevPi Webstatus2025-05-09csaf · kunbus_psirtDE
ICSA-25-191-09KUNBUS RevPi Webstatus2025-07-10icsa · cisa_csaf_otUS
Successful exploitation of this vulnerability could allow attackers to bypass authentication and gain unauthorized access to the application.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot kunbus_psirt nvd NVD CVE.org MITRE

published 2025-06-06modified 2026-06-17

references (7)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan