Notification Handling Issue in P-Net by RT Labs

CVE-2026-124760

What is CVE-2026-124760?

P-Net versions prior to 1.0.4 experience a flaw in how alarm notifications are handled. When an alarm notification is received, the system temporarily sets the receiver state to wait for a confirmation before parsing the alarm data. If the parsing fails, the receiver state remains unchanged, which means subsequent notifications of the same priority are unjustly discarded without acknowledgment. This situation continues until the Application Relationship is terminated, although the surrounding cyclic data exchange operations persist. To exploit this vulnerability, an attacker must have adjacent network access and be capable of sending alarm notifications within an established Application Relationship.

References