{"affected":[{"product":"bacnet-stack","source":"CNA: GitHub_M","vendor":"bacnet-stack","versions":[{"status":"affected","version":"< 1.6.1"}]}],"cveId":"CVE-2026-104204","cwes":["CWE-770"],"description":"BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to version 1.6.1, there is a server-side denial-of-service issue affecting the Structured View object implementation. This issue has been patched in versions 1.6.1 and 1.7.0.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":8.7,"severity":"high","source":"CNA: GitHub_M","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","version":"4.0"}],"modifiedAt":1794595449471,"publishedAt":1794595449471,"references":[{"source":"CNA: GitHub_M","tags":["x_refsource_CONFIRM"],"url":"https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-hg85-pmm3-jfcf"},{"source":"CNA: GitHub_M","tags":["x_refsource_MISC"],"url":"https://github.com/bacnet-stack/bacnet-stack/pull/1437"}],"remediation":[],"revision":"6e20798c48d946d5dba738e61d04c3246b85030ead9438629a70f2530214933e","sources":[{"modifiedAt":1794595449471,"name":"CNA: GitHub_M","retrievedAt":1794596912173,"url":"https://www.cve.org/CVERecord?id=CVE-2026-104204"}],"ssvc":null,"status":"published","title":"BACnet Stack: Structured View subordinate-list[0] WriteProperty allows unbounded synchronous resize and remote unauthenticated DoS","updatedAt":1794596912173}