Remote Procedure Call Vulnerability in P-Net Affected by Endianness Issues
CVE-2026-127123

6MEDIUM

Key Information:

Vendor

Rt-labs

Status
P-net
Vendor
CVE Published:
13 November 2026

What is CVE-2026-127123?

P-Net before version 1.0.4 contains a vulnerability wherein the Application Relationship of an RPC session may be prematurely released without proper handling during fragments with differing endianness. This oversight results in the application being unaware that the Application Relationship has been severed, leading to halted cyclic data processes and unreferenced resources. An attacker with adjacent network access can exploit this flaw by using observed activity UUIDs to assume control of the released session.

Affected Version(s)

P-Net 0 < 1.0.4

References

https://rt-labs.com/wp-content/uploads/2026/11/RRTL-26110...

CVSS V4

Score:
6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.