HIGH 8.7 NVD

CVE-2026-111736

P-Net before 1.0.3 dereferences a NULL AR pointer in pf_fspm_cm_read_ind() when handling an implicit read request without a valid target AR UUID for a user spec

P-Net before 1.0.3 dereferences a NULL AR pointer in pf_fspm_cm_read_ind() when handling an implicit read request without a valid target AR UUID for a user specific record index, if the application has registered a read callback. A remote unauthenticated attacker can send such a request to crash the device (denial of service).

References

https://rt-labs.com/wp-content/uploads/2026/10/RRTL-261019-01.pdf

Published: 2026-10-29 · Source: NVD · Feed updated: 2026-10-29

This high severity vulnerability with a CVSS score of 8.7 was published on 2026-10-29 via NVD.

vulnfeed aggregates 16884 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.