{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/bacnet-stack/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":8.6,"id":"CVE-2026-47711"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["BACnet Stack"],"_cs_severities":["medium"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eThe BACnet Stack C library contains a vulnerability (CVE-2026-47711) affecting the master demo server. A remote actor can cause the server to crash over BACnet/IP by sending a Confirmed WriteProperty request that updates 'loop-1's controlled-variable-reference' to 'life-safety-zone-1 / accepted-modes'.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation results in a remote denial of service of the BACnet master demo server instance.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eReview the vendor documentation for patch availability and recommended updates.\u003c/p\u003e\n","date_modified":"2026-11-12T20:53:21Z","date_published":"2026-11-12T20:53:21Z","id":"https://feed.craftedsignal.io/briefs/2026-11-bacnet-stack-dos-cve-2026-47711/","summary":"The BACnet Stack C library contains a remote denial of service vulnerability where the master demo server can be crashed by sending a specific Confirmed WriteProperty request.","title":"BACnet Stack: Remote Denial of Service (CVE-2026-47711)","url":"https://feed.craftedsignal.io/briefs/2026-11-bacnet-stack-dos-cve-2026-47711/"},{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":8.2,"id":"CVE-2026-47710"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["BACnet Stack"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eBACnet Stack is an open source C library for embedded systems. A stack-buffer-overflow exists in the master branch when a Loop object reads a referenced property through its default timer path, specifically when a referenced OBJECT_STRUCTURED_VIEW / PROP_DESCRIPTION contains a long string.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability is rated with a CVSS v3.1 base score of 8.2.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eRefer to the official project repository for information regarding the vulnerability.\u003c/p\u003e\n","date_modified":"2026-11-12T20:53:13Z","date_published":"2026-11-12T20:53:13Z","id":"https://feed.craftedsignal.io/briefs/2026-11-bacnet-stack-buffer-overflow-cve-2026-47710/","summary":"The BACnet Stack library contains a stack-buffer-overflow vulnerability in the current master branch triggered by specific property handling in Loop objects.","title":"BACnet Stack: Stack-based buffer overflow in Loop object processing (CVE-2026-47710)","url":"https://feed.craftedsignal.io/briefs/2026-11-bacnet-stack-buffer-overflow-cve-2026-47710/"}],"language":"en","title":"CraftedSignal Threat Feed - BACnet Stack","version":"https://jsonfeed.org/version/1.1"}