Vulnerabilities

TI-2026-75358 CVE-2026-77630

Blocking DNS lookups in pupnp allow denial of service

LOW 39

pupnp is an SDK for development of UPnP device and control point applications.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0034 Published 2026-10-16 Fixed in 22.0.4 CWE-400

TI-2026-75354 CVE-2026-57488

MEDIUM 64

pupnp is an SDK for development of UPnP device and control point applications.

CVSS 3.1HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00331 Published 2026-10-16 Fixed in 2.0.2 CWE-190

TI-2026-75353 CVE-2026-57487

LOW 39

pupnp is an SDK for development of UPnP device and control point applications.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0041 Published 2026-10-16 Fixed in 2.0.2 CWE-770

TI-2026-75352 CVE-2026-57486

HIGH 72

pupnp is an SDK for development of UPnP device and control point applications.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0041 Published 2026-10-16 Fixed in 2.0.2 CWE-476

TI-2026-75349 CVE-2026-55862

MEDIUM 62

pupnp is an SDK for development of UPnP device and control point applications.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00465 Published 2026-10-16 Fixed in 2.0.0 CWE-674

TI-2021-10175 CVE-2021-29462

MEDIUM 43

The Portable SDK for UPnP Devices is an SDK for development of UPnP device and control point applications.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00627 Published 2021-04-20 Fixed in 1.14.6 CWE-20

TI-2021-09467 CVE-2021-28302 · GHSA-24m8-vm8v-rrfv

LOW 35

A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the Parser_parseDocument() function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0115 Published 2021-03-12 No fix listed CWE-770