CVE-2026-111730

Severity not reported

Data quality: partial. Some fields were not provided by the source.

P-Net before 1.0.3 does not validate the LengthPeerStationName field of a CheckPeers block in get_check_peer().

P-Net before 1.0.3 does not validate the LengthPeerStationName field of a CheckPeers block in get_check_peer(). The received length (up to 255) was used to copy data into the 241-byte peer station name buffer and to place the terminating NUL byte, so a crafted block writes up to 15 bytes past the end of the buffer. This can lead to a crash (denial of service) or potentially arbitrary code execution. Requires establishment of session that needs ADJACENT network access.

CVSS

—

Not reported by the source

Timeline (UTC)

Published: 2026-10-29 16:17

Modified: 2026-10-29 16:26

NVD status: Deferred

Last synced 15 hours ago

Verified against the source API 2026-10-29 16:44 UTC

Exploitation

Not listed in CISA KEV (as of last catalog sync)

Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).

Affected products

Not reported by the source (unknown — not "none").

Weakness classification (CWE)

CWE-787

Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.

Mitigation & advisories

No vendor advisory or patch reference tagged by NVD. Check the references below.

References

https://rt-labs.com/wp-content/uploads/2026/10/RRTL-261019-01.pdf 4b71179a-3b92-4a9d-b9fc-af8b8ed579ee

Data sources

NVD CVE API 2.0 — fetched 2026-10-29 16:44 UTC · record ↗

Learn the basics

Understanding CVEs and CVSS Scores