High severity · published Oct 29, 2026
CVE-2026-111731
Infinite loop when reading PDPortDataCheck record of subslot 0
New
8.7
CVSS
–
EPSS
No
On KEV
Description
P-Net before 1.0.3 enters an infinite loop when handling a read request for the PDPortDataCheck record with subslot 0 (whole module). The loop over the ports never advanced to the next port, so the request never completes and the device stops responding. A remote unauthenticated attacker can use this to cause a denial of service.
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PN
P-Net · RT-Labs
before 1.0.3 · source: vendor
Affected product
PN
P-Net
RT-Labs
More from P-Net
9.8
CVE-2025-32404
An Out-of-bounds Write in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to corrupt the memory of IO devices that use the library by sending a malicious RPC packet
9.8
CVE-2025-32403
An Out-of-bounds Write in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to corrupt the memory of IO devices that use the library by sending a malicious RPC packet
9.8
CVE-2025-32401
An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to corrupt the memory of IO devices that use the library by sending a malicious RPC…
9.3
CVE-2026-111732
Out-of-bounds write when parsing AR Vendor Block requests
8.7
CVE-2026-115793
Resource exhaustion from RPC sessions kept for requests to unknown interface