CVE-2026-57471: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in KUNBUS RevPiPyLoad
Nozomi Networks Labs identified a CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the file management functionality of the XML-RPC management interface of KUNBUS RevPiPyLoad in version 0.11.0 that allows a local unauthenticated attacker to read arbitrary files with the privileges of the RevPiPyLoad daemon, including sensitive configuration and credential material, by sending crafted requests to the local management service.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-57471?
CVE-2026-57471 has a risk score of 47, indicating a moderate severity level.
How do I fix CVE-2026-57471?
To fix CVE-2026-57471, ensure that file management functionalities are properly configured to limit access to restricted directories.
What software is affected by CVE-2026-57471?
CVE-2026-57471 affects KUNBUS RevPiPyLoad version 0.11.0.
What type of vulnerability is CVE-2026-57471?
CVE-2026-57471 is classified as a Path Traversal vulnerability, which allows access beyond the intended directory.
Can an attacker exploit CVE-2026-57471 remotely?
No, CVE-2026-57471 requires local unauthenticated access to exploit the vulnerability.