Review reviewHigh
CVE-2026-38570
the affected product
bacnet_stack 1.3.1 contains an Out-of-bounds Read in bacnet_tag_number_decode which allows attackers to cause a denial of service.
- CVSS
- 7.5
- EPSS
- 0.28% 20.1% percentile
- CISA KEV
- Not listed
- Published
- 2026.06.05