CVE-2026-104204 BACnet Stack: Structured View subordinate-list[0] WriteProperty allows unbounded synchronous resize and remote unauthenticated DoS

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to version 1.6.1, there is a server-side denial-of-service issue affecting the Structured View object implementation. This issue has been patched in versions 1.6.1 and 1.7.0...

CVE-2026-104204

The BACnet Stack , an open-source C library for embedded systems, is vulnerable to a server-side denial-of-service (DoS) attack in versions prior to 1.6.1 . The root cause lies in the Structured View object implementation , where the subordinate-list[0] WriteProperty allows for unbounded synchron...

PT-2026-146038

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. From versions 1.4.0 to before 1.4.4, and 1.5.0 to before 1.5.1, a NULL pointer dereference can be triggered in bacnet device object reference decode when a WriteProperty request updates OBJECT STRUCTURED VIEW / PR...