Title: JUNG Smart Panel 5.1 KNX Unauthenticated Absolute File Path Traversal
Advisory ID: ZSL-2026-5969
Type: Local/Remote
Impact: Security Bypass, Exposure of System Information, Exposure of Sensitive Information
Risk: (5/5)
Release Date: 10.02.2026

Summary

The JUNG Smart Panel 5.1 KNX is a flush-mounted 5-inch touch-sensitive controller designed for managing smart building automation via the KNX system. It serves as a, intuitive, centralized interface for controlling lighting, shading, heating, and security, utilizing a 640 x 480-pixel color TFT screen running on embedded Linux.

Description

The controller suffers from a directory traversal vulnerability. Exploiting this issue will allow an unauthenticated attacker to view arbitrary files within the context of the web server.

Vendor

ALBRECHT JUNG GMBH & CO. KG - https://www.jung-group.com | https://www.jung.de

Affected Version

L1.12.22

Tested On

GNU/Linux 3.0.35-1.1.0

Vendor Status

[06.02.2026] Vulnerability discovered.
[07.02.2026] Vendor contacted.
[09.02.2026] No response from the vendor.
[10.02.2026] Public security advisory released.

PoC

jung_dir.txt

Credits

Vulnerability discovered by Gjoko Krstic - <[email protected]>

References

[1] https://www.vulncheck.com/advisories/jung-smart-panel-knx-unauthenticated-path-traversal
[2] https://www.cve.org/cverecord?id=CVE-2026-25872

Changelog

[10.02.2026] - Initial release

Contact

Zero Science Lab

Web: https://www.zeroscience.mk
e-mail: [email protected]