CVE-2026-112200
Last modified
CVE-2026-112200 is a high-severity vulnerability rated 8.7/10 on the CVSS scale. P-Net before 1.0.3 does not release the Application Relationship (AR) and the RPC session when an RPC request is rejected because its data representation has incorrect endianness. The session and its AR remain allocated, so repeated requests exhaust the available sessions.
Description
P-Net before 1.0.3 does not release the Application Relationship (AR) and the RPC session when an RPC request is rejected because its data representation has incorrect endianness. The session and its AR remain allocated, so repeated requests exhaust the available sessions. Once they are exhausted the device no longer answers new RPC requests, including Connect, until it is restarted. A remote unauthenticated attacker can use this to cause a denial of service.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| RT-Labs | P-Net | < 1.0.3 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-112200?
How severe is CVE-2026-112200?
How do I fix CVE-2026-112200?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-112195A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. …4.7
- CVE-2026-112197Vulnerability due to a lack of authentication in critical fu…9.4
- CVE-2026-112198XML External Entity (XXE) injection vulnerability in the SAF…8.3
- CVE-2026-112199Improper Neutralization of Input During Web Page Generation …6.5
- CVE-2026-1122A vulnerability was determined in Yonyou KSOA 9.0. This impa…9.8
- CVE-2026-11220Insufficient validation of untrusted input in Navigation in …6.5
- CVE-2026-112202Imager::File::GIF versions before 1.006 for Perl allow out-o…6.5
- CVE-2026-112207The Download Monitor WordPress plugin before 5.3.4 does not …7.1
- CVE-2026-11221Insufficient validation of untrusted input in PointerLock in…4.3
- CVE-2026-112210A flaw was found in the rhc-canonical-facts.service systemd …6
- CVE-2026-112211Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2026-112212GitLab has remediated an issue in GitLab CE/EE affecting all…7.5
Are you affected by CVE-2026-112200?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST