VDE-2026-101
Okt. 20, 2026, 1:00 nachm.
The 'Pictory' web config tool, prior to 2.17.0, has a Cross-Site Request Forgery (CSRF) vulnerability, which makes it vulnerable to session takeover. The 'revpipyload' package, prior to version 0.11.1, has …
VDE-2026-100
Okt. 20, 2026, 1:00 nachm.
The 'piControl' kernel module used in the IndustrialPI, prior to version 2.8.0-1, contains multiple vulnerabilities. Successful exploitation of these vulnerabilities can lead to kernel memory corruption and denial of service.
VDE-2026-072
Aug. 4, 2026, 12:00 nachm.
The Linux kernel used in the IndustrialPI, 'linux-image-revpi-v8', prior to version 6.12.91-revpi0-rpi-v8 contains multiple vulnerabilities. Successful exploitation of these vulnerabilities can give an attacker full control over the device.
VDE-2026-019
April 23, 2026, 2:00 nachm.
The PASvisu Runtime is affected by a vulnerability in a third-party component which can be exploited by malicious web requests.
VDE-2026-006
Feb. 2, 2026, 11:00 vorm.
**PIT User Authentication Service is part of the operating mode selection and access permission system PITmode.** The PIT User Authentication Service is affected by multiple vulnerabilities in included third-party components.
VDE-2025-093
Okt. 20, 2025, 12:00 nachm.
The PASvisu Runtime is affected by a vulnerability in a third-party component which can be exploited by a malicious web request.
VDE-2025-045
Juli 1, 2025, 12:00 nachm.
Authentication is not configured by default for the Node-RED server on the Pilz industrial PC IndustrialPI. An unauthenticated remote attacker has full access to the Node-RED server and can run …
VDE-2025-039
Juli 1, 2025, 12:00 nachm.
The Pilz industrial PC IndustrialPI webstatus application is vulnerable to an authentication bypass.