CVE-2026-104204
Received Received - Intake

Denial-of-Service in BACnet Stack Library

Publication date: 2026-11-13

Last updated on: 2026-11-13

Assigner: GitHub, Inc.

Description
BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to version 1.6.1, there is a server-side denial-of-service issue affecting the Structured View object implementation. This issue has been patched in versions 1.6.1 and 1.7.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-13
Last Modified
2026-11-13
Generated
2026-11-13
AI Q&A
2026-11-13
EPSS Evaluated
N/A
NVD
CVE-2026-104204
EUVD
EUVD-2026-125698

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-770 The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a server-side denial-of-service issue in the BACnet Stack library affecting the Structured View object implementation. It exists in versions prior to 1.6.1 and was patched in versions 1.6.1 and 1.7.0.

Impact Analysis

An attacker could exploit this vulnerability to cause a denial-of-service condition on the affected BACnet server, potentially leading to system unavailability or degraded performance.

Mitigation Strategies

Update BACnet Stack to version 1.6.1 or later to patch the denial-of-service issue in the Structured View object implementation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-104204. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...