Which versions of KUNBUS piControl are affected by CVE-2026-13196?

KUNBUS piControl 2.6.2 carries a kernel stability vulnerability affecting RevPi industrial automation systems that can be exploited by local users to cause operational disruption.

How to fix or mitigate CVE-2026-13196?

Within 24 hours: audit all piControl 2.6.2 deployments across RevPi infrastructure, document affected device inventory, and restrict /dev/piControl character device access via file permissions to authorized personnel only. Within 7 days: deploy system monitoring for unexpected kernel panics or memory-related crashes on piControl systems, coordinate with KUNBUS on current patch availability and timeline, and test access control changes in staging environments. Within 30 days: evaluate piControl upgrade paths to patched versions, establish vendor communication for security updates, and document all deployed compensating controls to mitigate local denial-of-service impact.

KUNBUS piControl CVE-2026-13196

Q: What is the CVSS score of CVE-2026-13196?

CVE-2026-13196 has a CVSS 4.0 base score of 7.3 (High). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-58672 HIGH

Out-of-bounds Write (CWE-787)

2026-08-14 Nozomi

GHSA-j9mv-375p-293q

Buffer Overflow Denial Of Service Memory Corruption Picontrol Kunbus

7.3

CVSS 4.0 · Vendor: Nozomi

Severity by source

Vendor (Nozomi) PRIMARY

7.3 HIGH

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.8 HIGH

Local-only exploitation via character device requiring low-privilege config access; kernel OOB write causes full memory corruption but scope remains within the single compromised system.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (Nozomi).

CVSS VectorVendor: Nozomi

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Aug 14, 2026 - 15:46 vuln.today

CVE Published

Aug 14, 2026 - 15:00 cve.org

HIGH 7.3

DescriptionCVE.org

Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker with device configuration access to write attacker-controlled data outside the bounds of the process-image buffer and corrupt adjacent kernel memory, resulting in kernel memory corruption and denial of service, by supplying crafted device configuration data and crafted input through the piControl character device.

AnalysisAI

Kernel memory corruption in KUNBUS piControl version 2.6.2 allows a local authenticated attacker with device configuration access to write beyond process-image buffer boundaries, corrupting adjacent kernel memory and causing denial of service. The vulnerability resides in process-image management functionality and is triggered by supplying crafted device configuration data and crafted input through the piControl character device. No public exploit code or active exploitation has been confirmed at time of analysis, though the industrial OT context and kernel-level impact elevate operational priority for RevPi deployments.

Technical ContextAI

KUNBUS piControl is a kernel-mode driver component used in Revolution Pi (RevPi) industrial Linux controllers - Raspberry Pi-based devices designed for ICS/OT automation environments. The process image is a shared memory region that maps I/O data between connected PLC modules; the driver exposes this functionality via a character device (typically /dev/piControl0). The root cause is CWE-787 (Out-of-Bounds Write): the process-image management code fails to enforce write boundary checks when processing attacker-supplied configuration data and I/O input, allowing writes to extend beyond the allocated buffer into adjacent kernel memory. The CPE string cpe:2.3:a:kunbus:picontrol:*:*:*:*:*:*:*:* uses an unbounded wildcard, confirming NVD has not yet scoped the version range beyond what the Nozomi advisory identifies - version 2.6.2 is the confirmed affected release per the researcher disclosure.

RemediationAI

No vendor-released patch version has been confirmed in the available data at time of analysis; administrators must consult KUNBUS directly and monitor the Nozomi Networks advisory at https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-13196 for patch release information. As immediate compensating controls, restrict access to the piControl character device (typically /dev/piControl0) using Linux DAC permissions and group membership so only explicitly trusted operator accounts can interact with it - this directly removes the low-privilege access path required for exploitation. Enforce device configuration delivery through a controlled, audited pipeline rather than permitting arbitrary user-supplied configuration files on the device. Implement auditd rules to log all open and write calls against the piControl character device to detect anomalous usage. Physically and network-isolate RevPi nodes consistent with ICS security best practices so that compromise of an OT workstation does not trivially extend to production controllers. Note that restricting character device access may impact legitimate operator tooling - validate against operational workflows before applying.