CVE-2026-13198

mediumEPSS 0.001 · 2 %ileDEEU

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.13% (2nd) EPSS

CVSS 6.5 · medium

Is it mine?

12 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · kunbus_psirt · pilz_psirt

EPSS · scored 2026-10-20

Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the event notification functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker to corrupt kernel heap and event-list state and disclose a small amount of adjacent kernel memory, resulting in kernel memory corruption and denial of service, by issuing concurrent crafted requests from multiple threads through the piControl character device.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedpicontrolkunbus_psirt
Upgrade to picontrol version 2.8.0
https://packages.revolutionpi.com/pool/main/p/picontrol/picontrol_2.8.0-1+deb13+1_arm64.deb
Fixedpilz_psirt
Update package 'picontrol' to version 2.8.0-1 or higher.

cvss

Technical severity, 0–10. One row per scoring source.

6.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 2–6.5

v3.16.5mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:Hsecondary · Pilz PSIRT DE

v3.16.5mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H/E:P/RL:O/RC:Csecondary · KUNBUS PSIRT

v4.05.9mediumCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:Nsecondary · ENISA EU

v4.05.9mediumCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · prodsec@nozominetworks.com

v4.02lowCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-362USCWE-362USCWE-362US

affected products (12)

Products and version ranges known to be affected.

Kunbus piControl≤ 0 ≤2.6.2enisa_euvdEU
picontrol≤ vers:deb/<=2.6.2-1+deb12+1kunbus_psirtDEpkg:deb/revolutionpi/picontrol@2.6.2-1+deb12+1
picontrolall versionskunbus_psirtDEpkg:deb/revolutionpi/picontrol@2.7.0-1+deb13+1
picontrolall versionsfixedkunbus_psirtDEpkg:deb/revolutionpi/picontrol@2.8.0-1+deb13+1
IndustrialPI OS 10.06.2025 installed on IndustrialPI 4all versionsfixedpilz_psirtDEcpe:2.3:o:pilz:industrialpi_firmware:10.06.2025:*:*:*:*:*:*:*
IndustrialPI OS 10.06.2025 installed on IndustrialPI 4all versionspilz_psirtDEcpe:2.3:o:pilz:industrialpi_firmware:10.06.2025:*:*:*:*:*:*:*
IndustrialPI OS 23.06.2025 installed on IndustrialPI 4all versionspilz_psirtDEcpe:2.3:o:pilz:industrialpi_firmware:23.06.2025:*:*:*:*:*:*:*
IndustrialPI OS 23.06.2025 installed on IndustrialPI 4all versionsfixedpilz_psirtDEcpe:2.3:o:pilz:industrialpi_firmware:23.06.2025:*:*:*:*:*:*:*
IndustrialPI OS 25.12.2025 installed on IndustrialPI 4all versionspilz_psirtDEcpe:2.3:o:pilz:industrialpi_firmware:25.12.2025:*:*:*:*:*:*:*
IndustrialPI OS 25.12.2025 installed on IndustrialPI 4all versionsfixedpilz_psirtDEcpe:2.3:o:pilz:industrialpi_firmware:25.12.2025:*:*:*:*:*:*:*
picontrol 2.7.0-1 installed on IndustrialPI OS 15.06.2026 installed on IndustrialPI 4all versionsfixedpilz_psirtDEcpe:2.3:o:pilz:industrialpi_firmware:15.06.2026:*:*:*:*:*:*:*
picontrol 2.7.0-1 installed on IndustrialPI OS 15.06.2026 installed on IndustrialPI 4all versionspilz_psirtDEcpe:2.3:o:pilz:industrialpi_firmware:15.06.2026:*:*:*:*:*:*:*

advisories (2)

Vendor and ecosystem advisories describing this.

Kunbus-2026-0000008Multiple Vulnerabilities in piControl Kernel Module2026-07-27csaf · kunbus_psirtDE
PPSA-2026-004Pilz: Vulnerabilities in 'piControl' kernel module for Industrial PC IndustrialPI2026-10-20csaf · pilz_psirtDE
The 'piControl' kernel module used in the IndustrialPI, prior to version 2.8.0-1, contains multiple vulnerabilities. Successful exploitation of these vulnerabilities can lead to kernel memory corruption and denial of service.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd kunbus_psirt pilz_psirt NVD CVE.org MITRE

published 2026-08-14modified 2026-08-28

references (3)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan