Bacnetstack is a narrowly scoped but strategically important building-automation protocol library that appears across critical infrastructure and HVAC control systems, presenting a concentrated attack surface in industrial and facilities environments. Vulnerabilities affecting the vendor skew toward serious outcomes, clustering around memory-safety and input-handling weaknesses such as out-of-bounds reads, off-by-one errors, buffer over-reads, and path-traversal flaws that are characteristic of protocol parsing in embedded control contexts. Defenders should prioritize inventory and isolation of systems running this library, as the building-automation sector's operational-continuity constraints complicate rapid patching; live severity and exploitation counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Bacnetstack over time
Signals from CVEs in this vendor scope (9 CVEs).
9 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-41475CRITICAL BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, an out-of-bounds read vulnerability in bacnet-stack's WritePropertyMultiple serv | Apr 24, 2026 | 9.1 | 33 | NO | NO |
CVE-2026-41503HIGH BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, an out-of-bounds read vulnerability in bacnet-stack's ReadPropertyMultiple servi | Apr 24, 2026 | 7.5 | 28 | NO | NO |
CVE-2026-41502HIGH BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, an off-by-one out-of-bounds read vulnerability in bacnet-stack's ReadPropertyMul | Apr 24, 2026 | 7.5 | 28 | NO | NO |
CVE-2026-21878HIGH BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0.rc3, a vulnerability has been discovered in BACnet Stack's file writing functiona | Feb 13, 2026 | 7.5 | 25 | NO | NO |
CVE-2025-66624HIGH BACnet Protocol Stack library provides a BACnet application layer, network layer and media access (MAC) layer communications services. Prior to 1.5.0.rc2, The npdu_is_expected_repl | Dec 5, 2025 | 7.5 | 25 | NO | NO |
CVE-2026-26264HIGH BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0rc4 and 1.4.3rc2, a malformed WriteProperty request can trigger a length underflow | Feb 13, 2026 | 8.1 | 24 | NO | NO |
CVE-2023-51773CRITICAL BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp_decode_application_data in bacapp.c. | Feb 29, 2024 | 9.1 | 24 | NO | NO |
CVE-2026-21870MEDIUM BACnet Protocol Stack library provides a BACnet application layer, network layer and media access (MAC) layer communications services. In 1.4.2, 1.5.0.rc2, and earlier, an off-by-o | Feb 13, 2026 | 5.5 | 21 | NO | NO |
BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, decode_signed32() in src/bacnet/bacint.c reconstructs a 32-bit signed integer fr | Apr 21, 2026 | 3.7 | 16 | NO | NO |
Signals from CVEs in this vendor scope (9 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Bacnetstack.
Media articles that mention a CVE ID that affects a product developed by Bacnetstack — matched by CVE ID, not by vendor name.