{"id":"CVE-2026-124760","kind":"vulnerability","aliases":["CVE-2026-124760"],"related":[],"title":"P-Net: failed alarm parsing leaves later alarms unacknowledged until relationship release","description":"P-Net before 1.0.4 sets the alarm receiver state to waiting for confirmation before the data of a received alarm notification is parsed. If the parsing fails the state is not restored, and later alarm notifications of the same priority are discarded without acknowledge until the Application Relationship is released. The Application Relationship and the cyclic data exchange keep working. The attacker must be able to send an alarm notification in the context of an established Application Relationship and requires ADJACENT network access.","summary":"P-Net is an industrial PROFINET device stack; before 1.0.4, a failed parse of an incoming alarm leaves the alarm receiver stuck waiting for confirmation. Later alarms of the same priority are then silently dropped without acknowledgement until the Application Relationship is released.","severity":"low","cvss":2.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["embedded","industrial-control","p-net","package","profinet"],"not_affected_if":["no-application-relationship","p-net-1.0.4-or-later"],"how_to_check":null,"fix":"- P-Net: upgrade to `1.0.4` or later","status":"open","published_at":"2026-11-13T14:17:50+00:00","first_seen_at":"2026-11-13T15:19:49+00:00","triaged_at":"2026-11-13T15:21:36+00:00","updated_at":"2026-11-13T15:21:36+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-11-13T15:21:36Z","model":"claude-haiku-5-5","output":{"fix":"- P-Net: upgrade to `1.0.4` or later","reach":"network","title":"P-Net: failed alarm parsing leaves later alarms unacknowledged until relationship release","impact":"low","summary":"P-Net is an industrial PROFINET device stack; before 1.0.4, a failed parse of an incoming alarm leaves the alarm receiver stuck waiting for confirmation. Later alarms of the same priority are then silently dropped without acknowledgement until the Application Relationship is released.","audience":"businesses","category":"package","nicknames":[],"who_cares":["p-net","profinet","industrial-control","embedded"],"confidence":0.6,"fix_status":"available","needs_auth":"yes","worst_case":"alarm notifications are dropped until the relationship is released","analyst_note":"","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":false,"not_affected_if":["p-net-1.0.4-or-later","no-application-relationship"],"who_is_affected":"Only devices built on P-Net before 1.0.4 that accept PROFINET alarm notifications are exposed. The attacker must be on the adjacent network and already hold an established Application Relationship with the device. Devices that never receive alarms from a peer, or that run a patched P-Net, can skip it.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"no","severity_if_unknown":"low"},"cost_usd":0.000703,"input_tokens":4611,"output_tokens":483,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-124760':16A,19A '-2026':15A,18A '1.0.4':39B,77C 'abl':138C 'access':156C 'acknowledg':66B,117C 'adjac':154C 'alarm':5A,9A,46B,49B,56B,80C,93C,108C,142C 'applic':69B,120C,125C,150C 'attack':135C 'confirm':54B,86C 'context':146C 'control':23B 'cve':14A,17A 'cyclic':129C 'data':89C,130C 'devic':36B 'discard':115C 'drop':64B 'embed':20B 'establish':149C 'exchang':131C 'fail':4A,41B,100C 'incom':45B 'industri':22B,34B 'industrial-control':21B 'keep':132C 'later':8A,55B,107C 'leav':7A,47B 'must':136C 'net':3A,26B,31B,75C 'network':155C 'notif':94C,109C,143C 'p':2A,25B,30B,74C 'p-net':1A,24B,29B,73C 'packag':27B 'pars':6A,42B,96C,99C 'prioriti':60B,113C 'profinet':28B,35B 'receiv':50B,81C,92C 'relationship':12A,70B,121C,126C,151C 'releas':13A,72B,123C 'requir':153C 'restor':105C 'send':140C 'set':78C 'silent':63B 'stack':37B 'state':82C,102C 'stuck':51B 'unacknowledg':10A 'wait':52B,84C 'without':65B,116C 'work':133C","nicknames":[],"mitigations":[],"who_affected":"Only devices built on P-Net before 1.0.4 that accept PROFINET alarm notifications are exposed. The attacker must be on the adjacent network and already hold an established Application Relationship with the device. Devices that never receive alarms from a peer, or that run a patched P-Net, can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["embedded","industrialcontrol","low","package","pnet","profinet"],"campaign_type":null,"search_a":"'-124760':16A,19A '-2026':15A,18A 'alarm':5A,9A 'cve':14A,17A 'fail':4A 'later':8A 'leav':7A 'net':3A 'p':2A 'p-net':1A 'pars':6A 'relationship':12A 'releas':13A 'unacknowledg':10A","search_b":"'1.0.4':39B 'acknowledg':66B 'alarm':46B,49B,56B 'applic':69B 'confirm':54B 'control':23B 'devic':36B 'drop':64B 'embed':20B 'fail':41B 'incom':45B 'industri':22B,34B 'industrial-control':21B 'later':55B 'leav':47B 'net':26B,31B 'p':25B,30B 'p-net':24B,29B 'packag':27B 'pars':42B 'prioriti':60B 'profinet':28B,35B 'receiv':50B 'relationship':70B 'releas':72B 'silent':63B 'stack':37B 'stuck':51B 'wait':52B 'without':65B","search_c":"'1.0.4':77C 'abl':138C 'access':156C 'acknowledg':117C 'adjac':154C 'alarm':80C,93C,108C,142C 'applic':120C,125C,150C 'attack':135C 'confirm':86C 'context':146C 'cyclic':129C 'data':89C,130C 'discard':115C 'establish':149C 'exchang':131C 'fail':100C 'keep':132C 'later':107C 'must':136C 'net':75C 'network':155C 'notif':94C,109C,143C 'p':74C 'p-net':73C 'pars':96C,99C 'prioriti':113C 'receiv':81C,92C 'relationship':121C,126C,151C 'releas':123C 'requir':153C 'restor':105C 'send':140C 'set':78C 'state':82C,102C 'wait':84C 'without':116C 'work':133C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T14:17:50+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"4b71179a-3b92-4a9d-b9fc-af8b8ed579ee","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-124760","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-124760","severity":null,"published_at":"2026-11-13T14:17:50+00:00","modified_at":"2026-11-13T14:17:50+00:00","first_seen_at":"2026-11-13T15:19:49+00:00","fetched_at":"2026-11-13T15:19:49+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}