EPSS 0.00 (nejvyšší)
Pilz: Vulnerabilities in 'PiCtory' and 'RevPiPyLoad' for Industrial PC IndustrialPI
[PPSA-2026-005] The 'Pictory' web config tool, prior to 2.17.0, has a Cross-Site Request Forgery (CSRF) vulnerability, which makes it vulnerable to session takeover. The 'revpipyload' package, prior to version 0.11.1, has a vulnerability in the file management functionality of its XML-RPC interface. This allows an attacker to access or delete arbitrary files that the 'revpipyload' process has access to.
CVE v události 3
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-57469 | 5.1 4.0 · Nozomi | – | 0.00 |
| CVE-2026-57471 | 6.8 4.0 · Nozomi | – | 0.00 |
| CVE-2026-57472 | 6.9 4.0 · Nozomi | – | 0.00 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.