Revolution Pi PiCtory vulnerabilities

2 known vulnerabilities in Revolution Pi PiCtory from Kunbus. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.0 Critical severity

  Revolution Pi PiCtory: Improper Neutralization of Server-Side Includes (SSI) Within a Web Page

  CVE-2025-35996May 1, 2025KunbusEPSS 19.3%

  KUNBUS PiCtory version 2.11.1 and earlier are vulnerable when an authenticated remote attacker crafts a special filename that can be stored by API endpoints. That filename is later transmitted to the client in order to show a list of configuration files. Due t

• 9.8 Critical severity

  Revolution Pi PiCtory: Authentication Bypass by Primary Weakness

  CVE-2025-32011May 1, 2025KunbusEPSS 28.7%

  KUNBUS PiCtory versions 2.5.0 through 2.11.1 have an authentication bypass vulnerability where a remote attacker can bypass authentication to get access due to a path traversal.