CVE-2026-49990

The BACnet Stack C library for embedded systems contains a vulnerability where a signed fileStartPosition from AtomicReadFile and AtomicWriteFile stream-access requests lacks sufficient validation before reaching RAM file backends . This flaw affects versions 1.4.2 to 1.4.4 and 1.5.0 . Consequenc...