Self-Signed Certificate Vulnerability in BACnet Stack Open Source Protocol Library
CVE-2026-102537

7.7HIGH

Key Information:

Vendor

Bacnet-stack

Status
Bacnet-stack
Vendor
CVE Published:
13 November 2026

What is CVE-2026-102537?

The BACnet Stack is an open-source protocol library for embedded systems that allows devices to communicate using the BACnet protocol. Prior to versions 1.4.6, 1.5.2, and 1.6.1, a critical flaw existed in how the library handles self-signed certificates. Specifically, the function bws_cli_connect() allowed the acceptance of self-signed certificates without proper validation. This means that a BACnet/SC node could inadvertently authenticate with a rogue hub, exposing sensitive information such as VMAC and UUID to an attacker. The vulnerability has been addressed and patched in subsequent versions 1.4.6, 1.5.2, 1.6.1, and 1.7.0.

Affected Version(s)

bacnet-stack < 1.4.6 < 1.4.6

bacnet-stack >= 1.5.0, < 1.5.2 < 1.5.0, 1.5.2

bacnet-stack >= 1.6.0, < 1.6.1 < 1.6.0, 1.6.1

References

https://github.com/bacnet-stack/bacnet-stack/security/adv...
x_refsource_CONFIRM
https://github.com/bacnet-stack/bacnet-stack/pull/1434
x_refsource_MISC

CVSS V4

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.