CVE-2026-111731

P-Net before 1.0.3 enters an infinite loop when handling a read request for the PDPortDataCheck record with subslot 0 (whole module). The loop over the ports never advanced to the next port, so the request never completes and the device stops responding. A remote unauthenticated attacker can use this to cause a denial of service.

• CWE-835

• https://rt-labs.com/wp-content/uploads/2026/10/RRTL-261019-01.pdf

Published

Oct 29, 2026

Last Modified

Oct 29, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-111723LingGuo-Drama through commit 8a6924a contains a missing auth…8.8
• CVE-2026-111726The Themify Builder plugin for WordPress is vulnerable to St…6.4
• CVE-2026-111727The Appointment Booking Calendar plugin for WordPress is vul…6.4
• CVE-2026-111728Seanime v3.7.0 to v3.10.3 contains an argument injection vul…5.4
• CVE-2026-11173Out of bounds write in V8 in Google Chrome prior to 149.0.78…8.8
• CVE-2026-111730P-Net before 1.0.3 does not validate the LengthPeerStationNa…7.2
• CVE-2026-111732P-Net before 1.0.3, when built with PNET_OPTION_AR_VENDOR_BL…9.3
• CVE-2026-111733P-Net before 1.0.3 dereferences a NULL AR pointer when handl…8.7
• CVE-2026-111734P-Net before 1.0.3 does not validate the length of a receive…7.1
• CVE-2026-111735P-Net before 1.0.3 contains an integer underflow in pf_cpm_c…7.1
• CVE-2026-111736P-Net before 1.0.3 dereferences a NULL AR pointer in pf_fspm…8.7
• CVE-2026-111737The Speed Optimizer WordPress plugin before 7.8.5 does not …3.5