{"affected":[{"product":"bacnet-stack","source":"CNA: GitHub_M","vendor":"bacnet-stack","versions":[{"status":"affected","version":">= 1.5.0, < 1.5.1"},{"status":"affected","version":">= 1.6.0-rc1, < 1.6.0"}]}],"cveId":"CVE-2026-47257","cwes":["CWE-670","CWE-754"],"description":"BACnet Stack is a BACnet open source protocol stack C library for embedded systems. In versions 1.5.0 and 1.6.0-rc1, there is a restore logic flaw in bacnet-stack that is reachable through the official, unmodified apps/server management path when BACNET_BACKUP_RESTORE is enabled. This issue has been patched in versions 1.5.1 and 1.6.0.","epss":null,"exploits":[{"kind":"exploit","source":"ADP: CISA-ADP","url":"https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-x6pp-3pf3-f87r"}],"kev":null,"metrics":[{"score":8.1,"severity":"high","source":"CNA: GitHub_M","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","version":"3.1"},{"score":8.1,"severity":"high","source":"NVD: security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","version":"3.1"}],"modifiedAt":1794529798395,"publishedAt":1794513697984,"references":[{"source":"CNA: GitHub_M","tags":["x_refsource_CONFIRM"],"url":"https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-x6pp-3pf3-f87r"},{"source":"CNA: GitHub_M","tags":["x_refsource_MISC"],"url":"https://github.com/bacnet-stack/bacnet-stack/pull/1352"},{"source":"ADP: CISA-ADP","tags":["exploit"],"url":"https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-x6pp-3pf3-f87r"},{"source":"security-advisories@github.com","tags":[],"url":"https://github.com/bacnet-stack/bacnet-stack/pull/1352"},{"source":"security-advisories@github.com","tags":[],"url":"https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-x6pp-3pf3-f87r"}],"remediation":[],"revision":"35caa111b69b4dd2b3d229e51b3b076122e26f39363841883db21e9cbe3bd0e9","sources":[{"modifiedAt":1794529798395,"name":"CNA: GitHub_M","retrievedAt":1794532188638,"url":"https://www.cve.org/CVERecord?id=CVE-2026-47257"},{"modifiedAt":1794521379233,"name":"NVD","retrievedAt":1794529639570,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47257"}],"ssvc":{"assessedAt":1794529754948,"automatable":"no","exploitation":"poc","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"BACnet Stack: ReinitializeDevice ENDRESTORE can delete existing objects on an empty restore file and still return success","updatedAt":1794532188638}