Login Request a demo
MI
Product
miniupnpd
by miniupnp project · last CVE Oct 7, 2026
13
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 2High 6Medium 1Low 0
Severity
All severities13Critical2High6Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add miniupnpd to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-8798
9.8
24%
May 11
Integer signedness error in MiniUPnP MiniUPnPc v1.4.20101221 through v2.0 allows remote attackers to cause a denial of service or possibly have unspecified other impact
Affected: 1.4; 1.5; 1.7; 1.8; 1.9; 2.0
CVE-2026-5720
9.1
1%
Apr 17
miniupnpd Integer Underflow SOAPAction Header Parsing
Affected: before 2.3.10
CVE-2017-1000494
7.8
0%
Jan 3
Uninitialized stack variable vulnerability in NameValueParserEndElt (upnpreplyparse.c) in miniupnpd < 2.0 allows an attacker to cause Denial of Service (Segmentation fault and…
Affected: before 2.0
CVE-2013-2600
7.5
2%
Nov 1
MiniUPnPd has information disclosure use of snprintf()
Affected: 1.8
CVE-2019-12111
7.5
3%
May 15
A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in copyIPv6IfDifferent in pcpserver.c
Affected: through 2.1
CVE-2019-12109
7.5
3%
May 15
A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for rem_port
Affected: through 2.1
CVE-2019-12108
7.5
3%
May 15
A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for int_port
Affected: through 2.1
CVE-2019-12106
7.5
3%
May 15
The updateDevice function in minissdpd.c in MiniUPnP MiniSSDPd 1.4 and 1.5 allows a remote attacker to crash the process due to a Use After Free vulnerability
Affected: 1.4; 1.5
CVE-2026-107159
6.5
0%
Oct 7
MiniUPnPd through 2.3.11 Divide-by-Zero DoS via SSDP M-SEARCH MX Header
Affected: through 2.3.11
CVE-2013-1462
–
2%
Jan 31
Integer signedness error in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of…
Affected: 1.0
CVE-2013-1461
–
3%
Jan 31
The ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service (NULL pointer…
Affected: 1.0
CVE-2013-0230
–
69%
Jan 31
Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to execute arbitrary…
Affected: 1.0
CVE-2013-0229
–
76%
Jan 31
The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attackers to cause a denial of service (service crash) via a…
Affected: through 1.3; 1.0; 1.1; 1.2
Showing 13