CVE-2026-13197

UNKNOWN 0.0

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in KUNBUS piControl

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the configuration and process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker to trigger use-after-free and invalid pointer dereferences on kernel configuration objects, resulting in kernel memory corruption and denial of service, by issuing concurrent crafted requests through the piControl character device.

CWE	CWE-362
Vendor	kunbus
Product	picontrol
Published	Aug 14, 2026

Stay Ahead of the Next One

Get instant alerts for kunbus picontrol

Be the first to know when new unknown vulnerabilities affecting kunbus picontrol are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

KUNBUS / piControl

0 ≤ 2.6.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

nozominetworks.com: https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-13197

Credits

Gabriele Quagliarella at Nozomi Networks