CVE-2026-57472

Name of the Vulnerable Software and Affected Versions KUNBUS RevPiPyLoad version 0.11.0

Description A path traversal issue exists in the file management functionality of the XML-RPC management interface. This allows a local unauthenticated attacker to delete arbitrary files using the privileges of the RevPiPyLoad daemon by sending crafted requests to the local management service. This can lead to a denial of service and loss of configuration integrity. Path traversal is a flaw where an application uses user-supplied input to construct a pathname that is used to access files or directories outside of the intended folder.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.