[ Vendor · 11 CVEs ]
RT-Labs
CVEs affecting RT-Labs published in the last 30 days, plus any RT-Labs CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-115795 | 29 Oct 2026 | CVSS 5.3 | RT-Labs P-NetP-Net before 1.0.3 does not check that a complete block header is present in the received data before reading the next block in DCP Set and Identify… | |
| CVE-2026-112200 | 29 Oct 2026 | CVSS 8.7 | RT-Labs P-NetP-Net before 1.0.3 does not release the Application Relationship (AR) and the RPC session when an RPC request is rejected because its data… | |
| CVE-2026-115793 | 29 Oct 2026 | CVSS 8.7 | RT-Labs P-NetP-Net before 1.0.3 does not release the RPC session allocated for an RPC request that names an unknown interface or object UUID, and does not start a… | |
| CVE-2026-115794 | 29 Oct 2026 | CVSS 2.3 | RT-Labs P-NetP-Net before 1.0.3 passes the application alarm callback a data length derived from the variable part length field of a received RTA alarm frame… | |
| CVE-2026-111730 | 29 Oct 2026 | CVSS 7.2 | RT-Labs P-NetP-Net before 1.0.3 does not validate the LengthPeerStationName field of a CheckPeers block in get_check_peer(). The received length (up to 255) was… | |
| CVE-2026-111731 | 29 Oct 2026 | CVSS 8.7 | RT-Labs P-NetP-Net before 1.0.3 enters an infinite loop when handling a read request for the PDPortDataCheck record with subslot 0 (whole module). The loop over… | |
| CVE-2026-111732 | 29 Oct 2026 | CVSS 9.3 | RT-Labs P-NetP-Net before 1.0.3, when built with PNET_OPTION_AR_VENDOR_BLOCKS enabled, parses a data length from a field of the ARVendorBlock request that is not… | |
| CVE-2026-111733 | 29 Oct 2026 | CVSS 8.7 | RT-Labs P-NetP-Net before 1.0.3 dereferences a NULL AR pointer when handling an implicit read request without a valid target AR UUID for a record index that… | |
| CVE-2026-111734 | 29 Oct 2026 | CVSS 7.1 | RT-Labs P-NetP-Net before 1.0.3 does not validate the length of a received Ethernet frame in pf_eth_recv() before reading the EtherType, any VLAN tags and the… | |
| CVE-2026-111735 | 29 Oct 2026 | CVSS 7.1 | RT-Labs P-NetP-Net before 1.0.3 contains an integer underflow in pf_cpm_c_data_ind(). When handling a received cyclic data frame while the consumer is in the FRUN… | |
| CVE-2026-111736 | 29 Oct 2026 | CVSS 8.7 | RT-Labs P-NetP-Net before 1.0.3 dereferences a NULL AR pointer in pf_fspm_cm_read_ind() when handling an implicit read request without a valid target AR UUID for… |