CVE-2026-38570

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

bacnet_stack 1.3.1 contains an Out-of-bounds Read in bacnet_tag_number_decode which allows attackers to cause a denial of service.

Published 2026-06-04. Last modified 2026-07-22.