Security Advisory

CVE-2026-13198

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-14 15:02:42

Last updated 2026-08-14 19:44:39

Assigner Nozomi

CVSS score 5.9

State PUBLISHED

Description

Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the event notification functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker to corrupt kernel heap and event-list state and disclose a small amount of adjacent kernel memory, resulting in kernel memory corruption and denial of service, by issuing concurrent crafted requests from multiple threads through the piControl character device.

← Browse all CVEs View on cve.org ↗