Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

pupnp vulnerabilities

7 published CVEs name pupnp among the affected products.

Newest CVEs

  • CVE-2026-77630

    pupnp: Denial of service via blocking DNS resolution in parse_uri()/GENA callback parsing

    pupnp · pupnp

    High7.5
  • CVE-2026-57488

    pupnp: Integer truncation in HTTP Content-Length parsing enables request smuggling

    pupnp · pupnp

    High7.1
  • CVE-2026-57487

    libupnp chunked HTTP bodies can bypass g_maxContentLength and be fully buffered

    pupnp · pupnp

    High7.5
  • CVE-2026-57486

    pupnp: NULL pointer dereference in ixmlNode_compare crashes on non-namespaced attributes

    pupnp · pupnp

    High7.5
  • CVE-2026-55862

    pupnp: Incomplete fix for CVE-2021-28302: recursive DOM functions cause stack overflow

    pupnp · pupnp

    Medium6.5
  • CVE-2026-41682

    pupnp: Port truncation via atoi() cast in parse_uri() allows SSRF port confusion

    pupnp · pupnp

    Medium6.9
  • CVE-2021-29462

    DNS rebinding in pupnp

    pupnp · pupnp

    High7.6