PT-2026-146043

CVE-2026-47257

Published

2026-11-12

Updated

2026-11-12

Description by

CVSS 3.1

8.1

High

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions BACnet Stack version 1.5.0 BACnet Stack version 1.6.0-rc1

Description A restore logic flaw exists in the BACnet open source protocol stack C library for embedded systems. This issue is reachable through the official, unmodified apps/server management path when the BACNET BACKUP RESTORE feature is enabled.

Recommendations Update BACnet Stack version 1.5.0 to 1.5.1. Update BACnet Stack version 1.6.0-rc1 to 1.6.0.

Exploitability

Exploit

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-670: Always-Incorrect Control Flow Implementation

CWE-754: Improper Check for Unusual or Exceptional Conditions

Related identifiers

CVE-2026-47257