CVE-2026-59693

The record

A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.233.16-7862), Desigo PXC3 (All versions < V01.21.233.16-7862), Desigo PXC4 (All versions < V02.21.194.36-2715), Desigo PXC5.E003 (All versions < V02.21.194.36-2715), Desigo PXC5.E24 (All versions < V02.21.194.36-2715), Desigo PXC7 (All versions < V02.21.194.36-2715). The affected devices are vulnerable to a denial-of-service (DoS) vulnerability. An attacker can exploit this issue by sending a malformed BACnet packet, causing the device to stop responding to BACnet queries. Recovery requires a device reset or reboot to restore normal functionality.

Affected packages

Related vulnerabilities

• CVE-2026-100352 kin-openapi is a Go project for handling OpenAPI files. CWE-754
• CVE-2026-98161 In the Linux kernel, the following vulnerability has been resolved: nvdimm: pmem: keep… CWE-754
• CVE-2026-77411 RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. CWE-754
• CVE-2026-87645 Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed… CWE-754
• CVE-2026-87548 Improper state validation in Installer in Google Chrome prior to 153.0.8010.36 allowed a… CWE-754
• CVE-2026-87532 Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed… CWE-754
• CVE-2026-73314 XenForo before 2.3.13 contains a signature verification logic error in the PayPal REST… CWE-754
• CVE-2026-85014 undici's experimental WebSocketStream client crashes the whole Node.js process when a… CWE-754