Skip to content
OpenAdvisories

Vendor

KUNBUS

14 known vulnerabilities.

Products

piControl 3 Revolution Pi PiCtory 3 RevPiPyLoad 2 Revolution Pi 2 PiCtory 1 PR100088 Modbus gateway 1 Revolution Pi OS Bookworm 1 Revolution Pi webstatus 1 Revolution Pi OS Bullseye 0 linux-image-revpi-v8 0
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-41646 Public exploit Scanner template EPSS 51%

    RevPi Webstatus application is vulnerable to an authentication bypass

    An unauthorized remote attacker can bypass the authentication of the affected software package by misusing an incorrect type conversion. This leads to full compromise of the device

    KUNBUS Revolution Pi webstatus
  • Critical 9.0
    CVE-2025-35996 EPSS 19%

    KUNBUS Revolution Pi Improper Neutralization of Server-Side Includes (SSI) Within a Web Page

    KUNBUS PiCtory version 2.11.1 and earlier are vulnerable when an authenticated remote attacker crafts a special filename that can be stored by API endpoints. That filename is later transmitted to the client in order to show a list of configuration files. Due …

    KUNBUS Revolution Pi PiCtory
  • Critical 9.8
    CVE-2025-32011 EPSS 29%

    KUNBUS Revolution Pi Authentication Bypass by Primary Weakness

    KUNBUS PiCtory versions 2.5.0 through 2.11.1 have an authentication bypass vulnerability where a remote attacker can bypass authentication to get access due to a path traversal.

    KUNBUS Revolution Pi PiCtory
  • Critical 10.0
    CVE-2025-24522

    KUNBUS Revolution Pi Authentication Bypass by Primary Weakness

    KUNBUS Revolution Pi OS Bookworm 01/2025 is vulnerable because authentication is not configured by default for the Node-RED server. This can give an unauthenticated remote attacker full access to the Node-RED server where they can run arbitrary commands on th…

    KUNBUS Revolution Pi OS Bookworm