Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
pupnp is an SDK for development of UPnP device and control point applications. Prior to version 1.18.5, pupnp is vulnerable to SRRF port confusion due to port truncation via atoi() cast in parse_uri(). This issue has been patched in version 1.18.5.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-41682 pupnp is an SDK for development of UPnP device and control point applications. Prior to version 1.18.5, pupnp is vulnerable to SRRF port confusion due to port truncat… https://www.cve.org/CVERecord?id=CVE-2026-41682
Post summary
CVE‑2026‑41682 is a newly disclosed vulnerability in the pupnp SDK, involving SRRF port confusion from port truncation in versions before 1.18.5, with no PoC, exploit, or active exploitation reported.
CVE-2026-41682 SSDP/UPnP Port Confusion Vulnerability in Pupnp Prior to Version 1.18.5 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41682
Post summary
The information announces CVE‑2026‑41682 as an SSDP/UPnP port‑confusion flaw affecting Pupnp versions before 1.18.5, without any mention of PoC, exploit code, active attacks, or remediation.