CVE-2026-49341 · Package
NO FIX YET · SEE WHAT TO DO
BACnet Stack is an open source C library implementing the BACnet building-automation protocol for embedded systems. Before version 1.5.1, a remote attacker can crash the default demo server built from the unmodified apps/server/main.c, causing denial of service.
first public Jul 5, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Teams that build the default BACnet demo server from apps/server/main.c without modification and run it on a reachable network. Systems that use a modified server or a version at or after 1.5.1 are not affected.
Not affected if modified-server, version-1.5.1-or-later
Who cares bacnet-stack, building-automation, embedded
1.5.1 or later is not affected1.5.1 or laterBACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to version 1.5.1, there is a remotely reachable denial-of-service vulnerability in bacnet-stack affecting the default demo server built from the unmodified apps/server/main.c. This issue has been patched in version 1.5.1.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.