CVE-2026-52786

The BACnet Stack C library (prior to versions 1.4.5 , 1.5.1 , and 1.6.0 ) contains a network-reachable memory corruption vulnerability in the official apps/epics client tool (specifically on v1.6.0-rc1). A malicious BACnet/IP endpoint can send a syntactically valid ReadPropertyMultiple-ACK contai...