CVE-2026-13197

HIGH

CVE: CVE-2026-13197 - Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vu...Sign in to save

CVSS

7.3

CVSS v4.0

EPSS

N/A

Exploit Prediction Score

Published

August 14, 2026

Exploitability

No EPSS data available

Description

Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the configuration and process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker to trigger use-after-free and invalid pointer dereferences on kernel configuration objects, resulting in kernel memory corruption and denial of service, by issuing concurrent crafted requests through the piControl character device.

Weaknesses

CWE-362

Affected Packages

No package data available.

Aliases

CVE-2026-13197

Related references

Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).

https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-13197