HIGH🇵🇱 Wersja polska

CVE-2026-21878

CVSS 7.5v3.1pub. 2026-02-13upd. 2026-02-18

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0.rc3, a vulnerability has been discovered in BACnet Stack's file writing functionality where there is no validation of user-provided file paths, allowing attackers to write files to arbitrary directories. This affects apps/readfile/main.c and ports/posix/bacfile-posix.c. This vulnerability is fixed in 1.5.0.rc3.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

  • Bacnetstack Bacnet Stack

    APP
    Bacnetstack
    1.5.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Path Traversal
CWE
References

Related vulnerabilities

CVE-2023-51773CRITICAL9.1PL ✓ten sam produkt

BACnet Stack: over-read bufora APDU w funkcji dekodującej bacapp.c

CVE-2026-41503HIGH8.7ten sam produkt

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, an out-of-...

CVE-2026-41475HIGH8.7ten sam produkt

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, an out-of-...

CVE-2026-41502HIGH8.7ten sam produkt

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, an off-by-...

CVE-2026-26264HIGH7.8ten sam produkt

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0rc4 and 1.4....