CVE-2026-13196 — Out-of-bounds Write in KUNBUS piControl

CVE-2026-13196

Out-of-bounds Write in KUNBUS piControl PUBLISHED

Description (CNA)

Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker with device configuration access to write attacker-controlled data outside the bounds of the process-image buffer and corrupt adjacent kernel memory, resulting in kernel memory corruption and denial of service, by supplying crafted device configuration data and crafted input through the piControl character device.

Affected (CNA)

Vendor / product	Versions
KUNBUS / piControl	affected 0 through 2.6.2

CWE

CWE-787

References

https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-13196

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.