pupnp

Products

ProductCVEsExploitedLatest
pupnp7–Oct 16, 2026

Exploited and recent CVEs

  • CVE-2026-77630 High 7.5 pupnp: Denial of service via blocking DNS resolution in parse_uri()/GENA callback parsing 0.3%
  • CVE-2026-57488 High 7.1 pupnp: Integer truncation in HTTP Content-Length parsing enables request smuggling 0.3%
  • CVE-2026-57487 High 7.5 libupnp chunked HTTP bodies can bypass g_maxContentLength and be fully buffered 0.4%
  • CVE-2026-57486 High 7.5 pupnp: NULL pointer dereference in ixmlNode_compare crashes on non-namespaced attributes 0.4%
  • CVE-2026-55862 Medium 6.5 pupnp: Incomplete fix for CVE-2021-28302: recursive DOM functions cause stack overflow 0.5%
  • CVE-2026-41682 Medium 6.9 pupnp: Port truncation via atoi() cast in parse_uri() allows SSRF port confusion 0.3%
  • CVE-2021-29462 High 7.6 DNS rebinding in pupnp 0.6%