{"id":"CVE-2026-111736","published":"2026-10-29T16:17:57.950","lastModified":"2026-10-29T16:26:37.430","description":"P-Net before 1.0.3 dereferences a NULL AR pointer in pf_fspm_cm_read_ind() when handling an implicit read request without a valid target AR UUID for a user specific record index, if the application has registered a read callback. A remote unauthenticated attacker can send such a request to crash the device (denial of service).","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-476"],"vendors":[],"products":[],"references":[{"url":"https://rt-labs.com/wp-content/uploads/2026/10/RRTL-261019-01.pdf","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}