Denial of Service Vulnerability in P-Net by RT Labs

CVE-2026-127124

What is CVE-2026-127124?

The vulnerability in P-Net allows an attacker with adjacent network access to trigger a denial of service condition. The issue arises from the RPC session management, where sessions associated with fragments of requests remain active indefinitely if the full request is not received. This can lead to session exhaustion, preventing legitimate connect requests from being processed until the system is rebooted. Proper session timeouts and management practices are essential to mitigate this risk.

References