P-Net vulnerabilities and CVEs

Known vulnerabilities affecting P-Net, with exploit availability attached to each one, so you can tell a flaw someone has written code for from one nobody has.

10 vulnerabilities tracked.

9.3 P-Net before 1.0.3, when built with PNETOPTIONARVENDORBLOCKS enabled, parses a data length from a field of the ARVendorBlock request that… CVE-2026-111732 29 Oct 2026
8.7 P-Net before 1.0.3 dereferences a NULL AR pointer in pffspmcmreadind() when handling an implicit read request without a valid target AR… CVE-2026-111736 29 Oct 2026
8.7 P-Net before 1.0.3 does not release the Application Relationship (AR) and the RPC session when an RPC request is rejected because its data… CVE-2026-112200 29 Oct 2026
8.7 P-Net before 1.0.3 dereferences a NULL AR pointer when handling an implicit read request without a valid target AR UUID for a record index… CVE-2026-111733 29 Oct 2026
8.7 P-Net before 1.0.3 enters an infinite loop when handling a read request for the PDPortDataCheck record with subslot 0 (whole module). CVE-2026-111731 29 Oct 2026
7.2 P-Net before 1.0.3 does not validate the LengthPeerStationName field of a CheckPeers block in getcheckpeer(). CVE-2026-111730 29 Oct 2026
7.1 P-Net before 1.0.3 contains an integer underflow in pfcpmcdataind(). CVE-2026-111735 29 Oct 2026
7.1 P-Net before 1.0.3 does not validate the length of a received Ethernet frame in pfethrecv() before reading the EtherType, any VLAN tags and… CVE-2026-111734 29 Oct 2026
5.3 P-Net before 1.0.3 does not check that a complete block header is present in the received data before reading the next block in DCP Set and… CVE-2026-115795 29 Oct 2026
2.3 P-Net before 1.0.3 passes the application alarm callback a data length derived from the variable part length field of a received RTA alarm… CVE-2026-115794 29 Oct 2026

What this covers

This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that P-Net is free of vulnerabilities.

Query this from an agent over MCP · Check a lockfile by version

Other products tracked here