VulnSocial

CVE-2026-26264Disclosure(bacnetstack / bacnet_stack)

LOWCVSS 8.1 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0rc4 and 1.4.3rc2, a malformed WriteProperty request can trigger a length underflow in the BACnet stack, leading to an out‑of‑bounds read and a crash (DoS). The issue is in wp.c within wp_decode_service_request. When decoding the optional priority context tag, the code passes apdu_len - apdu_size to bacnet_unsigned_context_decode without validating that apdu_size <= apdu_len. If a truncated APDU reaches this path, apdu_len - apdu_size underflows, resulting in a large size being used for decoding and an out‑of‑bounds read. This vulnerability is fixed in 1.5.0rc4 and 1.4.3rc2.

bacnetstack CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Patch / fix
Exploit / PoC references
Weakness type (CWE)
CWE-125

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • bacnet_stack

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • 2 total mentions across 1 day

Affected systems

Vendors
bacnetstack
Products
bacnet_stack

2 versions affected across 1 product

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-02-13: 2Technical Details · 2026-02-13: 202-13
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets2 URLs
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-26264 BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0rc4 and 1.4.3rc2, a malformed WriteProperty request can trigger a le… https://www.cve.org/CVERecord?id=CVE-2026-26264

    Post summary

    A vulnerability (CVE-2026-26264) in the BACnet Stack allows a malformed WriteProperty request to trigger a memory error on versions prior to 1.5.0rc4 and 1.4.3rc2; no proof of concept, exploitation tools, patch, or active exploitation is mentioned.

    00010415
    56.5K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-26264 BACnet Stack Out-of-Bounds Read Vulnerability in WriteProperty Request Handling https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-26264

    Post summary

    A new CVE (CVE-2026-26264) describing an out-of-bounds read in the BACnet stack’s WriteProperty handling is referenced, but no further details on exploitation or mitigation are provided.

    0000026
    4.0K followersView on X
CPE platform detail5 entries

5 of 5 entries

PartVendorProductVersionTarget SWTarget HW
Appbacnetstackbacnet_stack---
Appbacnetstackbacnet_stack1.4.3--
Appbacnetstackbacnet_stack1.5.0--
Appbacnetstackbacnet_stack1.5.0--
Appbacnetstackbacnet_stack1.5.0--

Explore more

Back to dashboardbacnetstack CVEsbacnet_stack vulnerabilities