CVE-2021-31718

ALTO 8.8CVE-2021-31718 · Published 25/04/2021 · updated 17/06/2026

In breve

CVE-2021-31718 è una vulnerabilità ALTO (CVSS 8.8) che riguarda npupnp (npupnp project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.96%, superiore al 61.6% delle vulnerabilità.
Correzione: aggiornare a 4.1.4 o successiva.

Package	Affected versions	Patched versions
npupnp npupnp_project	`< 4.1.4`	`4.1.4`

Description

The server in npupnp before 4.1.4 is affected by DNS rebinding in the embedded web server (including UPnP SOAP and GENA endpoints), leading to remote code execution.

References

openwall.com/lists/oss-security/2021/04/25/2 · Mailing List
framagit.org/medoc92/npupnp · Third Party Advisory
lesbonscomptes.com/upmpdcli/npupnp-doc/libnpupnp.html · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free