EUVD-2026-58678
GHSA-6hc6-rpp8-fm56
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The XML-RPC service requires no authentication per the description so PR:N applies; AV:L captures the local access prerequisite; no confidentiality impact as only file deletion is possible.
Primary rating from Vendor (Nozomi).
CVSS VectorVendor: Nozomi
Lifecycle Timeline
1DescriptionCVE.org
Nozomi Networks Labs identified a CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the file management functionality of the XML-RPC management interface of KUNBUS RevPiPyLoad in version 0.11.0 that allows a local unauthenticated attacker to delete arbitrary files with the privileges of the RevPiPyLoad daemon, resulting in loss of configuration integrity and denial of service, by sending crafted requests to the local management service.
AnalysisAI
Path traversal in KUNBUS RevPiPyLoad 0.11.0 enables local users to delete arbitrary files through the XML-RPC management interface without authenticating to the service, exploiting the daemon's own filesystem privileges via crafted requests. Discovered and reported by Nozomi Networks Labs, the flaw allows an attacker to corrupt configuration files or trigger denial of service on Revolution Pi industrial controllers, with integrity and availability impact classified as high. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attacker must have local access to the host running RevPiPyLoad 0.11.0 - physical presence, an active shell session, or a pre-existing foothold obtained through another vulnerability or compromised account is required. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 6.9 (Medium) is shaped primarily by the local attack vector (AV:L), which meaningfully restricts the attack surface compared to network-exploitable vulnerabilities - an attacker must already have a foothold on the host. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No specific patched version is confirmed in the available data; operators should consult the Nozomi Networks advisory at https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-57472 and contact KUNBUS directly for patch availability and release timeline. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Revpipyload
View allSame weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today