Skip to content
Ppupnp
Products
| Product | CVEs | Exploited | Latest |
| pupnp | 7 | – | Oct 16, 2026 |
Exploited and recent CVEs
-
CVE-2026-77630
High 7.5
pupnp: Denial of service via blocking DNS resolution in parse_uri()/GENA callback parsing
0.3%
-
CVE-2026-57488
High 7.1
pupnp: Integer truncation in HTTP Content-Length parsing enables request smuggling
0.3%
-
CVE-2026-57487
High 7.5
libupnp chunked HTTP bodies can bypass g_maxContentLength and be fully buffered
0.4%
-
CVE-2026-57486
High 7.5
pupnp: NULL pointer dereference in ixmlNode_compare crashes on non-namespaced attributes
0.4%
-
CVE-2026-55862
Medium 6.5
pupnp: Incomplete fix for CVE-2021-28302: recursive DOM functions cause stack overflow
0.5%
-
CVE-2026-41682
Medium 6.9
pupnp: Port truncation via atoi() cast in parse_uri() allows SSRF port confusion
0.3%
-
CVE-2021-29462
High 7.6
DNS rebinding in pupnp
0.6%