Denial of Service Vulnerability in P-Net by RT Labs

CVE-2026-112200

What is CVE-2026-112200?

The P-Net application, prior to version 1.0.3, contains a vulnerability that fails to properly release the Application Relationship (AR) and the RPC session when an incorrectly represented data request is received. This oversight can lead to resource exhaustion, where repeated invalid requests occupy all available sessions. As a consequence, the device becomes unresponsive to new RPC requests, including critical connection attempts, until it is restarted. This makes the system susceptible to unintended denial of service, leaving it vulnerable to potential exploitation by remote unauthenticated attackers.

References