https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T10:14:59.789587+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-21878 CVE-2026-21878 — BACnet Stack Improperly Limits Pathnames to a Restricted Directory 2026-10-07T10:14:59.805511+00:00

Affected: bacnet-stack

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0.rc3, a vulnerability has been discovered in BACnet Stack's file writing functionality where there is no validation of user-provided file paths, allowing attackers to write files to arbitrary directories. This affects apps/readfile/main.c and ports/posix/bacfile-posix.c. This vulnerability is fixed in 1.5.0.rc3.