https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-41503.htmlhttps://patchthecve.com/cve/CVE-2026-41503.htmlWed, 17 Jun 2026 10:46:48 +0000HIGH 7.5: BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, an out-of-bounds read vulnerability in bacnet-stack's ReadPropertyMultiple service property decoder allows unauthenticated remote attackers to read past allocated buffer boundaries by sending an RPM rhttps://patchthecve.com/cve/CVE-2026-41502.htmlhttps://patchthecve.com/cve/CVE-2026-41502.htmlWed, 17 Jun 2026 10:46:48 +0000HIGH 7.5: BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, an off-by-one out-of-bounds read vulnerability in bacnet-stack's ReadPropertyMultiple service decoder allows unauthenticated remote attackers to read one byte past an allocated buffer boundary by sendhttps://patchthecve.com/cve/CVE-2026-41475.htmlhttps://patchthecve.com/cve/CVE-2026-41475.htmlWed, 17 Jun 2026 10:46:46 +0000CRITICAL 9.1: BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, an out-of-bounds read vulnerability in bacnet-stack's WritePropertyMultiple service decoder allows unauthenticated remote attackers to read past allocated buffer boundaries by sending a truncated WPM https://patchthecve.com/cve/CVE-2026-40279.htmlhttps://patchthecve.com/cve/CVE-2026-40279.htmlWed, 17 Jun 2026 10:44:56 +0000LOW 3.7: BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, decode_signed32() in src/bacnet/bacint.c reconstructs a 32-bit signed integer from four APDU bytes using signed left shifts. When any of the four bytes has bit 7 set (value ≥ 0x80), the left-shift ope