At KUNBUS, we place great importance on the security of our systems and data. We recognize that security vulnerabilities can occur and appreciate the support of security experts and researchers who help us identify and address them. Our Responsible Disclosure Policy outlines how you can responsibly report security vulnerabilities and what you can expect from us.
View Responsible Disclosure Policy
Let us know your Revolution Pi / KUNBUS related security issues – For a secure transmission of your information to our e-mail address product-security(at)kunbus.com we provide a GPG key for end-to-end encryption.
KUNBUS GPG key
User-ID: KUNBUS GmbH Product Security <product-security@kunbus.com>
Validity: until December 31st, 2027
Key Type/Size: OpenPGP, RSA 4096-Bit
Key fingerprint: B484B6F71F2CD32BCCDF7C04C0027DE5D2D76A5F
https://psirt.kunbus.com/.well-known/csaf/openpgp/B484B6F71F2CD32BCCDF7C04C0027DE5D2D76A5F.asc
You can download our public key under the following link:

Never Miss a Security Update Again
Irregular security updates are a risk – and tracking updates manually takes time.
With the RevPi Update Tracker, you'll get notified immediately via email when updates are available for our operating system.
Subscribe to Update Tracker
Published Security Advisories
12.08.2026
Kunbus-2026-0000009: Multiple Vulnerabilities in KUNBUS Packages for Revolution Pi
12.08.2026
Kunbus-2026-0000008: Multiple Vulnerabilities in piControl Kernel Module
03.06.2026
Kunbus-2026-0000007: Fragnesia
02.06.2026
Kunbus-2026-0000006: "Dirty Frag"/"Copy Fail 2 : Electric Boogaloo"
29.05.2026
Kunbus-2026-0000005: Copy fail
06.06.2025
Kunbus-2025-0000004: Dangerous default file permissions
09.05.2025
Kunbus-2025-0000003: Authentication Bypass in RevPi Webstatus
02.04.2025
Kunbus-2025-0000002: Missing Authentication in Node-RED integration
02.04.2025
Kunbus-2025-0000001: Authentication Bypass and XSS in PiCtory
19.09.2024
Kunbus-2024-0000001: Security Issues in Webstatus
21.12.2022
Revolution Pi: Multiple Authentication Vulnerabilities in webstatus Package
03.01.2022
Security notice for Revolution Pi base modules
04.03.2019