bacnet-stack vulnerabilities
20 published CVEs name bacnet-stack among the affected products.
- 20Published CVEs20 of them scored
- 20Last 12 monthspublished in the last year
- 0Critical16 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-47711
BACnet Stack: Stack buffer overflow in Loop internal ReadProperty path via Life_Safety_Zone.accepted-modes on the default BACnet/IP server
bacnet-stack · bacnet-stack
High8.6 - CVE-2026-47710
BACnet Stack: Loop reference to long Structured View description causes stack-buffer-overflow
bacnet-stack · bacnet-stack
High8.2 - CVE-2026-47259
BACnet Stack: Stack-based buffer overflow in Notification Class RemoveListElement recipient-list decoding
bacnet-stack · bacnet-stack
High8.2 - CVE-2026-47258
BACnet Stack: Stack-based buffer overflow in Notification Class AddListElement recipient-list decoding
bacnet-stack · bacnet-stack
High8.2 - CVE-2026-47257
BACnet Stack: ReinitializeDevice ENDRESTORE can delete existing objects on an empty restore file and still return success
bacnet-stack · bacnet-stack
High8.1 - CVE-2026-47217
BACnet Stack: Channel member self-reference causes uncontrolled recursion and stack overflow in default BACnet/IP server
bacnet-stack · bacnet-stack
High7.5 - CVE-2026-46677
BACnet Stack: Client-Side Out-of-Bounds Read in AtomicReadFile-ACK Record-Access Handling via RecordCount / fileData[] Mismatch
bacnet-stack · bacnet-stack
Medium6.5 - CVE-2026-46676
BACnet Stack: Uninitialized Value Use in AtomicReadFile-ACK Record-Access Encoder Causes Response Corruption and Conditional Information Disclosure
bacnet-stack · bacnet-stack
Medium5.3 - CVE-2026-46674
BACnet Stack: Out-of-Bounds Read in AtomicWriteFile Record Decoder via Unbounded returnedRecordCount
bacnet-stack · bacnet-stack
High7.5 - CVE-2026-45341
BACnet Stack: NULL pointer dereference in bacnet_device_object_reference_decode() when WriteProperty updates Structured View subordinate-list
bacnet-stack · bacnet-stack
High7.5