CVE-2026-100403 | BACnet Stack up to 1.4.5/1.5.1/1.6.0 WebSocket Server realloc out-of-bounds write

A vulnerability identified as problematic has been detected in BACnet Stack up to 1.4.5/1.5.1/1.6.0. The impacted element is the function realloc of the component WebSocket Server. This manipulation causes out-of-bounds write.

This vulnerability is tracked as CVE-2026-100403. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More