bacnet stack vulnerabilities and fixes

Recent CVEs affecting bacnet stack, with upgrade or downgrade steps. 4 tracked.

Also searched as: bacnetstack.

bacnet stack has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-04-24. Highest priority: CVE-2026-41475 (score 52/100).

• CVE-2026-41503 HIGH 7.5 UPGRADE BACnet Stack is a BACnet open source protocol stack C library for embedded systems
• CVE-2026-41502 HIGH 7.5 UPGRADE BACnet Stack is a BACnet open source protocol stack C library for embedded systems
• CVE-2026-41475 CRITICAL 9.1 UPGRADE BACnet Stack is a BACnet open source protocol stack C library for embedded systems
• CVE-2026-40279 LOW 3.7 UPGRADE BACnet Stack is a BACnet open source protocol stack C library for embedded systems

FAQ

How do I fix bacnet stack vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is bacnet stack being exploited right now?

None of the tracked bacnet stack CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which bacnet stack CVE should I patch first?

CVE-2026-41475 currently ranks highest (52/100): BACnet Stack is a BACnet open source protocol stack C library for embedded systems.

RSS feed for bacnet stack · ← Back to latest CVEs