MEDIUM 5.1 NVD

CVE-2026-57469

Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the web-based configuration backend of KUNBUS PiCtory in version 2

Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the web-based configuration backend of KUNBUS PiCtory in version 2.16.0 that allows a remote unauthenticated attacker to perform state-changing operations in the context of an authenticated operator, including deletion of project and configuration files and reset of the control runtime, by inducing the victim's browser to submit crafted requests.

References

https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-57469

Published: 2026-08-14 · Source: NVD · Feed updated: 2026-08-14

This medium severity vulnerability with a CVSS score of 5.1 was published on 2026-08-14 via NVD.

vulnfeed aggregates 9887 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.