What’s Vulnerable › Products

bacnet-stack vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your bacnet-stack version is affected

Latest bacnet-stack vulnerabilities

• CVE-2026-41503 — BACnet Stack: Out-of-Bounds Read in ReadPropertyMultiple Property Decoder via Deprecated Tag Parser (CVSS 7.5)
• CVE-2026-41502 — BACnet Stack: Off-by-One Out-of-Bounds Read in ReadPropertyMultiple Object ID Decoder (CVSS 7.5)
• CVE-2026-41475 — BACnet Stack: Out-of-Bounds Read in WritePropertyMultiple Decoder via Deprecated Tag Parser (CVSS 9.1)
• CVE-2026-40279 — BACnet Stack: Undefined-behavior signed left shift in `decode_signed32()` (CVSS 3.7)
• CVE-2026-26264 — BACnet Stack WriteProperty decoding length underflow leads to OOB read and crash (CVSS 8.1)
• CVE-2026-21878 — BACnet Stack Improperly Limits Pathnames to a Restricted Directory (CVSS 7.5)
• CVE-2026-21870 — The BACnet Protocol Stack library has an Off-by-one Stack-based Buffer Overflow in tokenizer_string (CVSS 5.5)
• CVE-2025-66624 — BACnet-stack MS/TP reply matcher OOB read (CVSS 7.5)
• CVE-2023-51773 — (CVSS 9.1)