P
Vendor security profile
pupnp
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
5toplam CVE
Uncertain5 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
5Unknown
Latest vulnerabilities
7.5
CVE-2026-77630pupnp: Denial of service via blocking DNS resolution in parse_uri()/GENA callback parsing
Patch status unknownEPSS %0
7.1
CVE-2026-57488pupnp: Integer truncation in HTTP Content-Length parsing enables request smuggling
Patch status unknownEPSS %0
7.5
CVE-2026-57487libupnp chunked HTTP bodies can bypass g_maxContentLength and be fully buffered
Patch status unknownEPSS %0
7.5
CVE-2026-57486pupnp: NULL pointer dereference in ixmlNode_compare crashes on non-namespaced attributes
Patch status unknownEPSS %0
6.5
CVE-2026-55862pupnp: Incomplete fix for CVE-2021-28302: recursive DOM functions cause stack overflow
Patch status unknownEPSS %0