Skip to main content

Pupnp CVE-2026-41682

MEDIUM
Signed to Unsigned Conversion Error (CWE-195)
2026-05-08 GitHub_M
Information Disclosure Pupnp
6.9
CVSS 4.0 · GitHub Advisory
Share

Severity by source

GitHub Advisory PRIMARY
6.9 MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

2
CVSS changed
May 08, 2026 - 23:22 NVD
6.9 (MEDIUM)
CVE Published
May 08, 2026 - 22:47 nvd
MEDIUM 6.9

DescriptionGitHub Advisory

pupnp is an SDK for development of UPnP device and control point applications. Prior to version 1.18.5, pupnp is vulnerable to SRRF port confusion due to port truncation via atoi() cast in parse_uri(). This issue has been patched in version 1.18.5.

Analysis

pupnp is an SDK for development of UPnP device and control point applications. Prior to version 1.18.5, pupnp is vulnerable to SRRF port confusion due to port truncation via atoi() cast in parse_uri(). This issue has been patched in version 1.18.5.

More in Pupnp

View all
CVE-2021-28302 HIGH POC
7.5 Mar 12

A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the Parser_parseDocument() funct
CVE-2021-29462 CRITICAL
9.8 Apr 20

The Portable SDK for UPnP Devices is an SDK for development of UPnP device and control point applications. Rated critica

Same weakness CWE-195 – Signed to Unsigned Conversion Error

View all
CVE-2023-3635 HIGH POC
7.5
CVE-2026-26981 MEDIUM POC
6.5
CVE-2016-6560 HIGH
8.6
CVE-2024-25388 HIGH
8.4
CVE-2020-1913 HIGH
8.1
CVE-2020-6096 HIGH
8.1
CVE-2023-33034 HIGH
7.8
CVE-2025-30646 HIGH
7.1

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Vendor StatusVendor

SUSE

Product Status
openSUSE Tumbleweed Fixed

Share

CVE-2026-41682 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy