CVE-2026-41682
NoneCVSS
—
EPSS
0.5%
Published
May 8, 2026
CISA due date
—
The record
pupnp is an SDK for development of UPnP device and control point applications. Prior to version 1.18.5, pupnp is vulnerable to SRRF port confusion due to port truncation via atoi() cast in parse_uri(). This issue has been patched in version 1.18.5.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | libupnp | 0 | 1.18.5-1.1 |
Related vulnerabilities
- CVE-2026-77406 RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. CWE-195
- CVE-2026-18444 There is an integer conversion vulnerability resulting in an out-of-bounds read when… CWE-195
- CVE-2026-62959 Coturn is a free open source implementation of TURN and STUN Server. CWE-195
- CVE-2026-55991 In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unauthenticated client… CWE-195
- CVE-2026-49840 FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from… CWE-195
- CVE-2026-26981 OpenEXR provides the specification and reference implementation of the EXR file format… CWE-195
- CVE-2025-67897 In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short. CWE-195
- CVE-2026-114730 Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a… CWE-918