KUNBUS

Products

ProductCVEsExploitedLatest
piControl3–Aug 14, 2026
RevPiPyLoad2–Aug 14, 2026
PiCtory1–Aug 14, 2026
Revolution Pi webstatus1–Jun 6, 2025

Exploited and recent CVEs

  • CVE-2026-57472 Medium 6.9 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in KUNBUS RevPiPyLoad 0.2%
  • CVE-2026-57471 Medium 6.8 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in KUNBUS RevPiPyLoad 0.2%
  • CVE-2026-57469 Medium 5.1 Cross-Site Request Forgery (CSRF) in KUNBUS PiCtory 0.3%
  • CVE-2026-13198 Medium 5.9 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in KUNBUS piControl 0.1%
  • CVE-2026-13197 High 7.3 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in KUNBUS piControl 0.1%
  • CVE-2026-13196 High 7.3 Out-of-bounds Write in KUNBUS piControl 0.1%
  • CVE-2025-41646 Critical 9.8 RevPi Webstatus application is vulnerable to an authentication bypass 50.9%