Pilz: Vulnerabilities in 'PiCtory' and 'RevPiPyLoad' for Industrial PC IndustrialPI
[PPSA-2026-005] The 'Pictory' web config tool, prior to 2.17.0, has a Cross-Site Request Forgery (CSRF) vulnerability, which makes it vulnerable to session takeover. The 'revpipyload' package, prior to version 0.11.1, has a vulnerability in the file management functionality of its XML-RPC interface. This allows an attacker to access or delete arbitrary files that the 'revpipyload' process has access to.
EPSS 0.00 CVE-2026-57469 CVE-2026-57471 CVE-2026-57472 Pilz výroba a průmysl DE