PU
Vendor
pupnp
6
CVEs
0
On KEV
5
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-77630 | PU pupnp pupnp | 7.5 | Oct 16 | pupnp: Denial of service via blocking DNS resolution in parse_uri()/GENA callback parsing |
| CVE-2026-57488 | PU pupnp pupnp | 7.1 | Oct 16 | pupnp: Integer truncation in HTTP Content-Length parsing enables request smuggling |
| CVE-2026-57487 | PU pupnp pupnp | 7.5 | Oct 16 | libupnp chunked HTTP bodies can bypass g_maxContentLength and be fully buffered |
| CVE-2026-57486 | PU pupnp pupnp | 7.5 | Oct 16 | pupnp: NULL pointer dereference in ixmlNode_compare crashes on non-namespaced attributes |
| CVE-2026-55862 | PU pupnp pupnp | 6.5 | Oct 16 | pupnp: Incomplete fix for CVE-2021-28302: recursive DOM functions cause stack overflow |
| CVE-2026-41682 | PU pupnp pupnp | 6.9 | May 8 | pupnp: Port truncation via atoi() cast in parse_uri() allows SSRF port confusion |