PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-55732 Loytec CVE debrief

A high-severity Out-of-bounds Read vulnerability, CVE-2026-55732, was found in BACnet packet parsing of various Loytec products. This issue allows an unauthenticated remote attacker to crash the device by sending a malformed BACnet TimeSynchronization or UTC-TimeSynchronization packet. The vulnerability affects Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS, and L-PAD products through version 8.4.18 on LINX-A64. Organizations should prioritize patching this vulnerability to prevent potential exploitation.

Vendor
Loytec
Product
LIP-ME20xC
CVSS
HIGH 8.7
CISA KEV
Not listed in stored evidence
Original CVE published
2026-07-24
Original CVE updated
2026-07-27
Advisory published
2026-07-24
Advisory updated
2026-07-27

Who should care

Organizations using Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS, and L-PAD products through version 8.4.18 on LINX-A64 should prioritize patching this vulnerability. IT and security teams responsible for managing and securing these products should take immediate action to apply patches and implement additional security measures to prevent exploitation.

Technical summary

CVE-2026-55732 is an Out-of-bounds Read vulnerability (CWE-125) in the BACnet packet parsing function `bacdt_datetime_to_tod` of Loytec products. An unauthenticated remote attacker can exploit this by sending a malformed BACnet TimeSynchronization or UTC-TimeSynchronization packet with an invalid month value, causing `linx_a64.exe` to crash and ultimately rebooting the device. The vulnerability has a CVSS score of 8.7 and is classified as HIGH severity.

Defensive priority

High

Recommended defensive actions

  • Apply the vendor-provided patches for the affected Loytec products.
  • Implement network segmentation to limit access to vulnerable devices.
  • Monitor network traffic for suspicious BACnet packets.
  • Conduct regular inventory checks to ensure all Loytec products are up-to-date.
  • Consider compensating controls such as intrusion detection systems.
  • Review and update incident response plans to include procedures for handling potential exploitation attempts.
  • Perform thorough vulnerability assessments to identify and prioritize remediation of other potential vulnerabilities.

Evidence notes

The CVE record was published on 2026-07-24T15:18:31.543Z and last modified on 2026-07-27T20:32:11.620Z. The NVD entry is currently Deferred. The source item URL for CVE-2026-55732 is available. A security advisory from Loytec for CVE-2026-55732 was referenced. The CVE details were validated against multiple sources to ensure accuracy.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-55732 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-55732

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-55732 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-55732

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://www.loytec.com/support/product-security/advisories/8532-dibt-cve-20260608-0001-bacnet-crash-due-to-invalid-timesync-message-high

    [email protected]

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.