CVE-2026-57469: Cross-Site Request Forgery (CSRF) in KUNBUS PiCtory
Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the web-based configuration backend of KUNBUS PiCtory in version 2.16.0 that allows a remote unauthenticated attacker to perform state-changing operations in the context of an authenticated operator, including deletion of project and configuration files and reset of the control runtime, by inducing the victim's browser to submit crafted requests.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-57469?
CVE-2026-57469 has a moderate risk level of 57.
How do I fix CVE-2026-57469?
To fix CVE-2026-57469, ensure that you implement CSRF protection mechanisms in your web application.
What is CVE-2026-57469?
CVE-2026-57469 is a Cross-Site Request Forgery (CSRF) vulnerability in KUNBUS PiCtory that allows unauthorized state-changing operations.
Which version of KUNBUS PiCtory is affected by CVE-2026-57469?
CVE-2026-57469 affects KUNBUS PiCtory version 2.16.0.
Can CVE-2026-57469 be exploited remotely?
Yes, CVE-2026-57469 can be exploited by a remote unauthenticated attacker.