Skip to content
OpenAdvisories
High PPSA-2026-004 3 CVEs

Pilz: Vulnerabilities in 'piControl' kernel module for Industrial PC IndustrialPI

Published Oct 20, 2026 · Updated Oct 20, 2026

Vendor: KUNBUS Vendor: Pilz Product: IndustrialPI 4 Product: IndustrialPI OS Product: piControl

Summary

The 'piControl' kernel module used in the IndustrialPI, prior to version 2.8.0-1, contains multiple vulnerabilities. Successful exploitation of these vulnerabilities can lead to kernel memory corruption and denial of service.

Details

Impact
Authenticated users with the ability to execute their own code on the device can exploit these vulnerabilities for a kernel memory corruption and denial of service.

General Recommendations
Ensure that only trusted code is executed on the device.

Remediation
Update package 'picontrol' to version 2.8.0-1 or higher.

Vulnerabilities 3

  • High 7.3
    CVE-2026-13196

    Out-of-bounds Write in KUNBUS piControl

    Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker with device configuration access to write attacker-contr…

    KUNBUS piControl
  • High 7.3
    CVE-2026-13197

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in KUNBUS piControl

    Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the configuration and process-image management functionality of KUNBUS piControl in version 2.6.2 that allo…

    KUNBUS piControl
  • Medium 5.9
    CVE-2026-13198

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in KUNBUS piControl

    Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the event notification functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated…

    KUNBUS piControl

Revision history

  1. #1.0.0

    Initial Version

References