CVE-2026-13196

highpriority · track · 0EPSS 0.001 · 3 %ileDEEU

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.14% (3rd) EPSS

CVSS 7.8 · high

Is it mine?

11 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · kunbus_psirt · pilz_psirt

EPSS · scored 2026-10-22

Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker with device configuration access to write attacker-controlled data outside the bounds of the process-image buffer and corrupt adjacent kernel memory, resulting in kernel memory corruption and denial of service, by supplying crafted device configuration data and crafted input through the piControl character device.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedpicontrolkunbus_psirt
Upgrade to picontrol version 2.7.0
https://packages.revolutionpi.com/pool/main/p/picontrol/picontrol_2.7.0-1+deb13+1_arm64.deb
Fixedpilz_psirt
Update package 'picontrol' to version 2.8.0-1 or higher.

cvss

Technical severity, 0–10. One row per scoring source.

7.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.4–7.8

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · Pilz PSIRT DE

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · KUNBUS PSIRT

v4.07.3highCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:Nsecondary · ENISA EU

v4.07.3highCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · prodsec@nozominetworks.com

v4.04.4mediumCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-787USCWE-787USCWE-787US

affected products (11)

Products and version ranges known to be affected.

Kunbus piControl≤ 0 ≤2.6.2enisa_euvdEU
picontrol≤ vers:deb/<=2.6.2-1+deb12+1kunbus_psirtDEpkg:deb/revolutionpi/picontrol@2.6.2-1+deb12+1
picontrolall versionsfixedkunbus_psirtDEpkg:deb/revolutionpi/picontrol@2.7.0-1+deb13+1
IndustrialPI OS 10.06.2025 installed on IndustrialPI 4all versionsfixedpilz_psirtDEcpe:2.3:o:pilz:industrialpi_firmware:10.06.2025:*:*:*:*:*:*:*
IndustrialPI OS 10.06.2025 installed on IndustrialPI 4all versionspilz_psirtDEcpe:2.3:o:pilz:industrialpi_firmware:10.06.2025:*:*:*:*:*:*:*
IndustrialPI OS 23.06.2025 installed on IndustrialPI 4all versionsfixedpilz_psirtDEcpe:2.3:o:pilz:industrialpi_firmware:23.06.2025:*:*:*:*:*:*:*
IndustrialPI OS 23.06.2025 installed on IndustrialPI 4all versionspilz_psirtDEcpe:2.3:o:pilz:industrialpi_firmware:23.06.2025:*:*:*:*:*:*:*
IndustrialPI OS 25.12.2025 installed on IndustrialPI 4all versionspilz_psirtDEcpe:2.3:o:pilz:industrialpi_firmware:25.12.2025:*:*:*:*:*:*:*
IndustrialPI OS 25.12.2025 installed on IndustrialPI 4all versionsfixedpilz_psirtDEcpe:2.3:o:pilz:industrialpi_firmware:25.12.2025:*:*:*:*:*:*:*
picontrol 2.7.0-1 installed on IndustrialPI OS 15.06.2026 installed on IndustrialPI 4all versionsfixedpilz_psirtDEcpe:2.3:o:pilz:industrialpi_firmware:15.06.2026:*:*:*:*:*:*:*
picontrol 2.7.0-1 installed on IndustrialPI OS 15.06.2026 installed on IndustrialPI 4all versionspilz_psirtDEcpe:2.3:o:pilz:industrialpi_firmware:15.06.2026:*:*:*:*:*:*:*

advisories (2)

Vendor and ecosystem advisories describing this.

Kunbus-2026-0000008Multiple Vulnerabilities in piControl Kernel Module2026-07-27csaf · kunbus_psirtDE
PPSA-2026-004Pilz: Vulnerabilities in 'piControl' kernel module for Industrial PC IndustrialPI2026-10-20csaf · pilz_psirtDE
The 'piControl' kernel module used in the IndustrialPI, prior to version 2.8.0-1, contains multiple vulnerabilities. Successful exploitation of these vulnerabilities can lead to kernel memory corruption and denial of service.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd kunbus_psirt pilz_psirt NVD CVE.org MITRE

published 2026-08-14modified 2026-08-28

references (3)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan