UPnP SDK Vulnerability in pupnp Affects Application Performance
CVE-2026-57488

7.1HIGH

Key Information:

Vendor

Pupnp

Status
Pupnp
Vendor
CVE Published:
16 October 2026

What is CVE-2026-57488?

The pupnp SDK is susceptible to improper input validation within its HTTP parser. Prior to version 2.0.2, a flaw in the parsing of the Content-Length header can permit remote adjacent-network attackers to exploit discrepancies between the declared length and the actual bytes received. This results in potential denial of service or unexpected behavior in applications utilizing the SDK. The issue was addressed in version 2.0.2, which mitigated the risks associated with body length interpretation errors.

Affected Version(s)

pupnp < 2.0.2

References

https://github.com/pupnp/pupnp/security/advisories/GHSA-g...
x_refsource_CONFIRM
https://github.com/pupnp/pupnp/commit/de9602aef34ff722f36...
x_refsource_MISC
https://github.com/pupnp/pupnp/releases/tag/release-2.0.2
x_refsource_MISC

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.