RTA Alarm Frame Routing Vulnerability in P-Net by RT Labs
CVE-2026-124759

7.1HIGH

Key Information:

Vendor

Rt-labs

Status
P-net
Vendor
CVE Published:
13 November 2026

What is CVE-2026-124759?

The P-Net software from RT Labs prior to version 1.0.4 exposes a flaw in how it processes received RTA alarm frames. Specifically, when an RTA alarm frame is routed to an Application Relationship, it relies solely on the destination alarm reference without validating the source. This oversight allows an attacker with adjacent network access to disrupt an existing Application Relationship effectively or to send malicious alarm notifications. The attacker can craft these notifications with specific parameters such as type, slot, subslot, USI, and payload, posing a significant risk to the integrity and operation of applications utilizing P-Net.

Affected Version(s)

P-Net 0 < 1.0.4

P-Net 1.0.4

References

https://rt-labs.com/wp-content/uploads/2026/11/RRTL-26110...

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
Low
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Aditya Gupta (Attify - attify.com)
.