Bacnet Stack vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

BS

Product

Bacnet Stack

by Bacnetstack · last CVE Apr 24, 2026

9

CVEs

0

On KEV

9.1

Max CVSS

0

New 30D

Vulnerabilities9 In the news0 Timeline

Severity mix

Critical 2High 5Medium 1Low 1

Severity

All severities9 Critical2 High5 Medium1 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Bacnet Stack to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-26264	8.1	0%	Feb 13	BACnet Stack WriteProperty decoding length underflow leads to OOB read and crash Affected: 1.4.0 before 1.4.3; 1.4.3; 1.5.0; 1.5.0; 1.5.0
CVE-2026-41503	7.5	0%	Apr 24	BACnet Stack: Out-of-Bounds Read in ReadPropertyMultiple Property Decoder via Deprecated Tag Parser Affected: 1.4.0 before 1.4.3; 1.5.0
CVE-2026-41502	7.5	0%	Apr 24	BACnet Stack: Off-by-One Out-of-Bounds Read in ReadPropertyMultiple Object ID Decoder Affected: 1.4.0 before 1.4.3; 1.5.0; 1.5.0; 1.5.0
CVE-2026-21878	7.5	0%	Feb 13	BACnet Stack Improperly Limits Pathnames to a Restricted Directory Affected: 1.5.0; 1.5.0
CVE-2025-66624	7.5	0%	Dec 5	BACnet-stack MS/TP reply matcher OOB read Affected: 1.5.0